Security Advisory

CVE-2024-36452

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-10 07:01:48
Last updated 2024-11-05 21:12:24
Assigner jpcert
CVSS score not scored
State PUBLISHED

Description

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.