CVE-2021-31760: CSRF

Published Apr 25, 2021

Updated

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feature.

Affected Software

1 affected component

webmin webmin=1.973

Event History

Apr 25, 2021

CVE Published

via MITRE·06:28 PM

Data Sourced

via MITRE·06:28 PM

Description

Frequently Asked Questions

What is CVE-2021-31760?

CVE-2021-31760 is a vulnerability in Webmin 1.973 that allows an attacker to achieve remote command execution through Cross Site Request Forgery (CSRF) in Webmin's running process feature.

What is the severity of CVE-2021-31760?

The severity of CVE-2021-31760 is rated as high, with a CVSS score of 8.8.

How can an attacker exploit CVE-2021-31760?

An attacker can exploit CVE-2021-31760 by leveraging Cross Site Request Forgery (CSRF) to execute remote commands using Webmin's running process feature.

How can I mitigate the risk of CVE-2021-31760?

To mitigate the risk of CVE-2021-31760, it is recommended to update Webmin to a version that includes a fix for this vulnerability.

Where can I find more information about CVE-2021-31760?

You can find more information about CVE-2021-31760 on the official Webmin GitHub repository as well as other related GitHub repositories.