Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.
References
Link | Resource |
---|---|
https://github.com/ZoneMinder/zoneminder/issues/2642 | Exploit Issue Tracking Patch Third Party Advisory |
https://www.exploit-db.com/exploits/47060 | Exploit Third Party Advisory VDB Entry |
Configurations
History
30 Jan 2023, 18:57
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 5.4 |
References | (MISC) https://github.com/ZoneMinder/zoneminder/issues/2642 - Exploit, Issue Tracking, Patch, Third Party Advisory | |
References | (MISC) https://www.exploit-db.com/exploits/47060 - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2019-06-30 02:15
Updated : 2023-12-10 12:59
NVD link : CVE-2019-13072
Mitre link : CVE-2019-13072
CVE.ORG link : CVE-2019-13072
JSON object : View
Products Affected
zoneminder
- zoneminder
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')