Persistent XSS Vulnerability in C-MOR Video Surveillance by za-internet
CVE-2024-45177

5.4MEDIUM

Key Information:

Vendor

za-internet

Status
C-MOR Video Surveillance
Vendor
CVE Published:
4 September 2024

What is CVE-2024-45177?

A flaw has been identified in the C-MOR Video Surveillance web interface, where improper input validation opens the door to persistent cross-site scripting (XSS) attacks. This vulnerability allows attackers to inject malicious scripts into the camera configuration, potentially leading to unauthorized actions or data exposure. Users are advised to implement security measures to mitigate risks associated with inadequate user input validation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Adv...
https://www.syss.de/pentest-blog/mehrere-sicherheitsschwa...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.