CVE-2024-36452

LOW EPSS 7.4%
Published Jul 10, 20241y ago · Modified Jun 17, 20262w ago
3.1 CVSS 3.1
Low
Find Similar
Published Jul 10, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

CVSS Details

Base Score
3.1
Exploitability
1.6
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
7.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-352 Cross-Site Request Forgery (CSRF) Authentication

Affected Products 1

VendorProductVersionRange
webminwebmin* <2.003

References 2

  • jvn.jp https://jvn.jp/en/jp/JVN81442045/
    Third Party Advisory
  • webmin.com https://webmin.com/
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.