CSRF in Gentoo Webmin

CVE-2012-4893

Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, o…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (70.0th percentile) — read the EPSS interpretation.

Affected products

  • Gentoo Webmin — versions 1.140, 1.150, 1.160
  • N/a — versions n/a

Weakness classification (CWE)

References