CVE-2019-6777: XSS
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/zoneminderto a version that resolves this vulnerability.Fixed in 1.36.7-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6777?
CVE-2019-6777 has a medium severity rating due to the potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2019-6777?
To fix CVE-2019-6777, update ZoneMinder to version 1.32.4 or later where the vulnerability is patched.
How does CVE-2019-6777 affect ZoneMinder?
CVE-2019-6777 affects ZoneMinder by allowing an attacker to exploit reflected XSS via a crafted URL.
What should I do if I am using ZoneMinder v1.32.3 after discovering CVE-2019-6777?
If you are using ZoneMinder v1.32.3, it is recommended that you upgrade to a patched version immediately to mitigate the risk.
Is there a known exploit for CVE-2019-6777?
Yes, there are known exploits for CVE-2019-6777 that take advantage of the reflected XSS vulnerability in the application.