CVE-2020-8821

medium · 5.4

An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users.

5.4

CVSS

80.2%

EPSS (exploit prob.)

100th

EPSS percentile

2020-10-12

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
webmin	webmin	<= 1.941

Check a specific version with /api/v1/cve/match.

References

https://www.webmin.com/security.html
https://www.webmin.com/security.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-8821