Unrated

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, an...

CVE-2020-25730 First seen on SecPulse Apr 4, 2024

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-25730 zoneminder Fixed in: 1.34.21-1
Ubuntu UBUNTU-CVE-2020-25730 zoneminder

Original description The description as published by the source.

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com

Key facts

Severity: Unrated
Published: Apr 4, 2024
First seen on SecPulse: Apr 4, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52