Beveiligingsadvies
CVE-2020-35606
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.