CVE-2021-31761
CVE-2021-31761
Vexday Risk Score
35Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Proof of concept
Popular PoC on GitHub (5 stars) — exploitation code widely available.
CVSS —EPSS 33.6%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
21 Apr 2021Public PoC
25 Apr 2021Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.
Affected products
n/a · n/apublic PoCs found — 4
githubgithub.com/Mesh3l911/CVE-2021-31761★ 5githubgithub.com/electronicbots/CVE-2021-31761★ 4cve_referencepacketstormsecurity.com/files/163559/Webmin-1.973-Cross-Site-Request-Forgery.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50144unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.