SOURCE FACT
Webmin · Webmin
An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2019-15107
View source evidence →