CNNVD-202510-2353 Information
Oct 16, 2025
cve
CNNVD ID
CNNVD-202510-2353
Related CVE
- CNNVD Published: 2025-10-16
Description (Chinese)
Webmin是Webmin社区的一套基于Web的用于类Unix操作系统中的系统管理工具。 Webmin 2.510版本存在安全漏洞，该漏洞源于密码重置功能中未验证HTTP Host标头，可能导致攻击者注入恶意域名并拦截重置令牌，从而完全控制目标账户。
Description (English)
Webmin is a webmin community-based system management tool for the Unix operating system. Release 2.510 of Webmin has a security loophole, which stems from the failure to verify HTTP Host header in the password resetting function, which could result in the assailant injecting a malicious domain name and intercepting the resetting token, thus fully controlling the target account.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Webmin
Published
2025-10-16
Last Modified
2026-02-24
References
http://www.webmin.com/ https://github.com/bugdotexe/Vulnerability-Research/tree/main/CVE-2025-61541 https://github.com/webmin/webmin