PT-2019-18541
CVE-2019-7336
·
تاريخ النشر
2019-02-04
·
تاريخ التحديث
2020-02-17
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ZoneMinder versions prior to 1.32.4
Description
A Self-Stored Cross Site Scripting (XSS) issue exists, where user input is saved into the session and retrieved later without proper output filtration. Specifically, the values of the
MonitorName and Source parameters are displayed insecurely when the view parameter is set to cycle.Recommendations
For ZoneMinder versions prior to 1.32.4, update to version 1.32.4 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾