CVE-2019-12840

No fix known EPSS 78%

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi.

Published 2019-06-15 · CVE record · OSV

Products: webmin