| Package | Affected versions | Patched versions |
|---|---|---|
| webmin | ≤ 1.962 |
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free