C-MOR Video Surveillance Vulnerable to Reflected Cross-Site Scripting Attacks
CVE-2024-45176

6.1MEDIUM

Key Information:

Vendor

za-internet

Status
C-mor
Vendor
CVE Published:
5 September 2024

What is CVE-2024-45176?

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper input validation, the C-MOR web interface is vulnerable to reflected cross-site scripting (XSS) attacks. It was found out that different functions are prone to reflected cross-site scripting attacks due to insufficient user input validation.

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Adv...
https://www.syss.de/pentest-blog/mehrere-sicherheitsschwa...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.