vulnerability

Ubuntu: USN-5889-1 (CVE-2019-7325): ZoneMinder vulnerabilities

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Feb 4, 2019
Added
Mar 22, 2023
Modified
Nov 15, 2024

Description

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration.

Solution

ubuntu-pro-upgrade-zoneminder

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today