An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.
Source: NVD ↗ · CISA KEV Catalog ↗