Webmin & Usermin Vulnerability Advisory: SSRF, RCE, LPE, and 2FA Bypass in Multiple Versions

Vulnerability Overview This page lists security issues found in Webmin and Usermin, including vulnerability types, affected versions, and recommended solutions. Scope of Impact Webmin versions prior to 2.652 - SSRF Vulnerability: In the upload and download modules, unauthorized users can access files from other URLs. - Stored XSS Vulnerability: In the system and server status modules, unauthorized users can create notification email templates. - Privilege Escalation Vulnerability: Privilege escalation is possible through the help function, Squid module, etc. - XSS Attack: XSS attacks triggered via SVG email attachments. - 2FA Bypass: Bypassing 2FA requirements using basic authentication. Webmin versions prior to 2.641 - Stored XSS Vulnerability: In the system and server status modules, unauthorized users can create notification email templates. Webmin versions prior to 2.640 - Privilege Escalation Vulnerability: Privilege escalation via the help function. - XSS Attack: XSS attacks triggered via SVG email attachments. - 2FA Bypass: Bypassing 2FA requirements using basic authentication. Webmin versions prior to 2.600 - Privilege Escalation Vulnerability: Privilege escalation via the Squid module. Webmin version 2.510 and earlier - Host Header Injection Vulnerability: In the password reset feature, attackers can inject malicious links. Webmin version 2.202 and earlier - SSL Certificate Trust Issue: Client SSL certificates may be inadvertently trusted. Webmin version 2.105 and earlier - Privilege Escalation Vulnerability: Non-root users can execute commands via the shell auto-completion feature. Webmin 1.995 and Usermin 1.850 and earlier - XSS Vulnerability: In the HTTP tunnel module, attackers can capture other users' cookies. Webmin version 1.991 and earlier - Privilege Escalation Vulnerability: Low-privilege users can modify arbitrary files and execute commands. Webmin version 1.984 and earlier - File Manager Privilege Escalation Vulnerability: Low-privilege users can access and modify files. Virtualmin Procmail wrapper 1.0 - Privilege Escalation Vulnerability: Root privileges can be obtained via SSH access. Webmin version 1.973 and earlier - XSS Vulnerability: In the installation script, attackers can inject malicious code. Webmin version 1.941 and earlier - XSS Vulnerability: In the command shell module, attackers can execute malicious commands. Webmin version 1.882 and earlier - Remote Command Execution Vulnerability: Attackers can execute arbitrary commands. Webmin version 1.900 and earlier - Remote Command Execution Vulnerability: Command execution via Metasploit. - Malicious HTTP Header Vulnerability: Attackers can inject malicious code into downloaded URLs. Webmin version 1.800 and earlier - Theme Configuration Page Vulnerability: Attackers can execute commands. - Remote Access Vulnerability: Attackers can remotely execute commands. Webmin version 1.750 and earlier - XSS Vulnerability: In the XMLRPC CGI script, attackers can inject malicious code. Webmin version 1.720 and earlier - Mail Module Vulnerability: Attackers can read arbitrary files. Webmin version 1.700 and earlier - Shellshock Vulnerability: Attackers can execute arbitrary commands. Webmin version 1.590 and earlier - XSS Vulnerability: In the file manager module, attackers can execute arbitrary commands. Webmin version 1.540 and earlier - XSS Vulnerability: Attackers can execute arbitrary commands. Virtualmin version 3.70 and earlier - Unsafe File Write Vulnerability: Attackers can create malicious symbolic links. Webmin version 1.390 and earlier - XSS Vulnerability: Attackers can capture cookies. Webmin version 1.380 and earlier - Windows-Only Command Execution Vulnerability: Attackers can execute arbitrary commands. Remediation Webmin versions prior to 2.652 - Upgrade to the latest version. - Restrict access for unauthorized users. - Disable unnecessary modules. Webmin versions prior to 2.641 - Upgrade to the latest version. - Disable unnecessary modules. Webmin versions prior to 2.640 - Upgrade to the latest version. - Disable unnecessary modules. Webmin versions prior to 2.600 - Upgrade to the latest version. - Disable unnecessary modules. Webmin version 2.510 and earlier - Upgrade to the latest version. - Disable the password reset feature. Webmin version 2.202 and earlier - Upgrade to the latest version. - Disable client SSL certificate trust. Webmin version 2.105 and earlier - Upgrade to the latest version. - Disable the shell auto-completion feature. Webmin 1.995 and Usermin 1.850 and earlier - Upgrade to the latest version. - Disable the HTTP tunnel module. Webmin version 1.991 and earlier - Upgrade to the latest version. - Disable file modification permissions for low-privilege users. Webmin version 1.984 and earlier - Upgrade to the latest version. - Disable file access permissions for low-privilege users. Virtualmin Procmail wrapper 1.0 - Upgrade to the latest version. - Disable SSH access. Webmin version 1.973 and earlier - Up

Goal Reached Thanks to every supporter — we hit 100%!

Webmin & Usermin Vulnerability Advisory: SSRF, RCE, LPE, and 2FA Bypass in Multiple Versions