The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon