CVE-2019-9624

No fix known EPSS 24%

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.

Published 2019-03-07 · CVE record · OSV

Products: webmin