CVE-2019-15641

No fix known EPSS 1%

xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. By default, only root, admin, and sysadm can access xmlrpc.cgi.

Published 2019-08-26 · CVE record · OSV

Products: webmin