Unrated

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely pr...

CVE-2019-7338 First seen on SecPulse Feb 5, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-7338 zoneminder Fixed in: 1.34.6-1
Ubuntu UBUNTU-CVE-2019-7338 zoneminder

Original description The description as published by the source.

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely prints the 'Group Name' value on the web page without applying any proper filtration.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report github.com

Key facts

Severity: Unrated
Published: Feb 5, 2019
First seen on SecPulse: Feb 5, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52