Security Advisory
CVE-2019-15641
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. By default, only root, admin, and sysadm can access xmlrpc.cgi.