XSS vulnerability in filter view
CVE-2024-43358

6.1MEDIUM

Key Information:

Vendor

Zoneminder

Status
Zoneminder
Vendor
CVE Published:
12 August 2024

What is CVE-2024-43358?

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the filter view via the filter[Id]. This vulnerability is fixed in 1.36.34 and 1.37.61.

Affected Version(s)

zoneminder < 1.36.34 < 1.36.34

zoneminder >= 1.37.0, < 1.37.61 < 1.37.0, 1.37.61

References

https://github.com/ZoneMinder/zoneminder/security/advisor...
x_refsource_CONFIRM
https://github.com/ZoneMinder/zoneminder/commit/062cf568a...
x_refsource_MISC
https://github.com/ZoneMinder/zoneminder/commit/4602cd047...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.