Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-7328 →
DEBIAN-CVE-2019-7328
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'sc...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) via /js/frame.js.php because proper filtration is omitted.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
zoneminder
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-1"}]}]
Debian:13
zoneminder
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-1"}]}]
Debian:14
zoneminder
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-1"}]}]
Références
- advisory security-tracker.debian.org