CVE-2019-13072

Опубликовано: 30 июн. 2019

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.

Ссылки

https://github.com/ZoneMinder/zoneminder/issues/2642
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.exploit-db.com/exploits/47060
Exploit
Third Party Advisory
VDB Entry
https://github.com/ZoneMinder/zoneminder/issues/2642
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.exploit-db.com/exploits/47060
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zoneminder:zoneminder:1.32.3:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.0027

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2019-13072

CVSS3: 5.4

ubuntu

больше 6 лет назад

Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.

CVE-2019-13072

CVSS3: 5.4

debian

больше 6 лет назад

Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allow ...

GHSA-cx98-m4w9-fjjw

CVSS3: 5.4

github

больше 3 лет назад

Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.

EPSS

Процентиль: 50%

0.0027

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79