VDB

CVE-2012-4893

CVE-2012-4893 PUBLISHED CVSS 6.800000190734863 MEDIUM

Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, or (4) gzip commands, a different issue than CVE-2012-2982.

EPSS 0.85% · 56.5th percentile

Risk Scores

CVSS 2.0
6.800000190734863
EPSS Score
0.85%
56.5th percentile

Affected Products

VendorProductVersions
n/an/a*
gentoowebmin1.140, 1.180, 1.200

Timeline

  • Sep 11, 2012 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 17, 2022 CVE Updated
  • May 21, 2022 EPSS Score
  • Jul 15, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Oct 29, 2022 EPSS Score
  • Dec 21, 2022 EPSS Score
  • Feb 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›