CVE-2024-36450 Information

Description

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result a session ID may be obtained a webpage may be altered or a server may be halted.

Reference

https://webmin.com/ https://jvn.jp/en/jp/JVN81442045/