CVE-2019-7331: XSS
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-7331?
CVE-2019-7331 is a vulnerability that allows for self-stored cross-site scripting (XSS) attacks in ZoneMinder through version 1.32.3 while editing an existing monitor field named "signal check color".
How does CVE-2019-7331 impact ZoneMinder?
CVE-2019-7331 allows an attacker to inject malicious HTML and execute arbitrary scripts in ZoneMinder through a vulnerability in the monitor.php file, which could lead to unauthorized access and data theft.
What is the severity of CVE-2019-7331?
CVE-2019-7331 has a severity rating of 6.1 (Medium), indicating a significant vulnerability that can be exploited.
Is there a fix available for CVE-2019-7331?
Yes, a fix for CVE-2019-7331 is available in ZoneMinder version 1.32.4 or higher. It is recommended to update to the latest version to mitigate the vulnerability.
Where can I find more information about CVE-2019-7331?
You can find more information about CVE-2019-7331 on the official GitHub page of ZoneMinder: https://github.com/ZoneMinder/zoneminder/issues/2451