Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vqhg-mqww-h64x

Опубликовано: 04 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.

EPSS

Процентиль: 50%
0.00629
Низкий

8.2 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.2
ubuntu
больше 2 лет назад

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.

CVSS3: 8.2
nvd
больше 2 лет назад

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.

CVSS3: 8.2
debian
больше 2 лет назад

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version ...

CVSS3: 8.2
altlinux
около 6 лет назад

ALT-PU-2020-2881: package `zoneminder` update to version 1.34.21-alt1

EPSS

Процентиль: 50%
0.00629
Низкий

8.2 High

CVSS3

Дефекты

CWE-79