Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-7335 →
DEBIAN-CVE-2019-7335
Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prin...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
zoneminder
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-1"}]}]
Debian:13
zoneminder
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-1"}]}]
Debian:14
zoneminder
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-1"}]}]
Références
- advisory security-tracker.debian.org