CVE-2025-67738
- Source
- https://cve.org/CVERecord?id=CVE-2025-67738
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-67738.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-67738
- Published
- 2025-12-11T07:16:00.887Z
- Modified
- 2025-12-20T15:39:27.011974Z
- Severity
-
- 8.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions (the "cms" security option).
- References
Affected packages
Git / github.com/webmin/webmin
Affected ranges
- Type
- GIT
- Repo
- https://github.com/webmin/webmin
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
1.*
1.700
1.710
1.720
1.730
1.740
1.750
1.760
1.770
1.780
1.790
1.800
1.801
1.810
1.820
1.830
1.831
1.840
1.850
1.860
1.870
1.880
1.890
1.900
1.910
1.920
1.930
1.940
1.941
1.950
1.951
1.953
1.954
1.955
1.960
1.962
1.970
1.972
1.973
1.974
1.979
1.980
1.982
1.983
1.984
1.990
1.991
1.993
1.994
1.995
1.996
1.997
1.998
1.999
2.*
2.000
2.001
2.003
2.010
2.011
2.012
2.013
2.020
2.021
2.100
2.101
2.102
2.103
2.104
2.105
2.110
2.111
2.200
2.201
2.202
2.300
2.301
2.302
2.303
2.400
2.401
2.402
2.500
2.501
2.510
2.520