CVE-2024-36450 - CVE House
Back to Database
Status published Unknown CVE-2024-36450

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior...

Vulnerability Description

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may be altered, or a server may be halted.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-36450

Credits & Attribution

No credits recorded in the NVD database.

References

More from Webmin

View All →
CVE-2025-67738
squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments....
High 8.5
CVE-2024-36453
Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior...
Unknown 0
CVE-2024-36452
Cross-site request forgery vulnerability exists in ajaxterm module of Webmin...
Unknown 0
CVE-2024-36451
Improper handling of insufficient permissions or privileges vulnerability exists in...
Unknown 0
CVE-2024-12828
Webmin CGI Command Injection Remote Code Execution Vulnerability
Critical 9.9

Affected Vendor

Affected Software

Webmin
Vulnerable Versions:
versions prior to 1.910

Timeline

Official Publish: July 10th, 2024
Last Modified: March 13th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.