Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-7329
4.3
MEDIUMCVSS v2
Published
February 4, 2019
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.
ZoneMinder/zoneminder
GitHubZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.
GitHubZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras. <= 1.32.3NVD
mnoorenberghe/ZoneMinderGitHubZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.
GitHubZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.<= 1.32.3NVD