Threats tagged 'ghsa-j6x6-jmrf-3xvf'

Webmin versions up to 2.670 have a file injection vulnerability in the acl/cert_issue.cgi component. Authenticated users can exploit this by injecting newline characters in certificate DN fields, allowing them to add a root entry with a known password hash. This can lead to full root access after the miniserv service restarts.