Threats tagged 'ghsa-gch6-2h35-g7hv'

Webmin versions up to 2.670 contain a privilege escalation vulnerability in the acl/save_group.cgi component. This flaw allows delegated administrators with access to the Webmin Users module to escalate privileges by submitting arbitrary module lists in the mod parameter. Exploiting this, attackers can assign themselves membership in groups with powerful modules such as Command Shell, enabling command execution as root.