CVE-2019-7340: XSS
POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]' parameter value in the view filter (filter.php) because proper filtration is omitted.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-7340?
CVE-2019-7340 is a vulnerability in ZoneMinder through version 1.32.3 that allows an attacker to execute HTML or JavaScript code via a vulnerable parameter value in the view filter.
How severe is CVE-2019-7340?
CVE-2019-7340 has a severity rating of 6.1 (medium).
How does CVE-2019-7340 work?
CVE-2019-7340 works by exploiting a Cross-Site Scripting (XSS) vulnerability in ZoneMinder through version 1.32.3, allowing an attacker to inject and execute malicious code.
Which software versions are affected by CVE-2019-7340?
CVE-2019-7340 affects ZoneMinder version 1.32.3.
Is there a fix available for CVE-2019-7340?
At the moment, there is no official fix available for CVE-2019-7340, but it is recommended to update to the latest version of ZoneMinder when it becomes available.