critical9.8
CVE-2020-35769
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program.
Impact
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmin | Webmin | Version 1.962 |
References
- NVD record
- CVE.org record
- https://github.com/webmin/webmin/commit/1163f3a7f418f249af64890f4636575e687e9de7#diff-9b33fd8f5603d4f0d1428689bc36f24af4770608a22c0d92b7a8bcc522450dc6
- https://vigilance.fr/vulnerability/Webmin-code-execution-via-miniserv-pl-handle-request-34220
- https://github.com/webmin/webmin/commit/1163f3a7f418f249af64890f4636575e687e9de7#diff-9b33fd8f5603d4f0d1428689bc36f24af4770608a22c0d92b7a8bcc522450dc6
- https://vigilance.fr/vulnerability/Webmin-code-execution-via-miniserv-pl-handle-request-34220