medium6.5
CVE-2019-15641
xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks.
Impact
xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. By default, only root, admin, and sysadm can access xmlrpc.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmin | Webmin | through 1.930 |