Servers and applications
CVE-2024-36452
Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.
- Severity
- Low 3.1
- Published
- 10 Jul 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.003
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
WebminServers and applications · cpe:a:webmin:webmin |
|