CVE-2020-25729

Опубликовано: 17 сент. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.

Ссылки

https://forums.zoneminder.com/viewforum.php?f=1
Vendor Advisory
https://github.com/ZoneMinder/zoneminder/commit/9268db14a79c4ccd444c2bf8d24e62b13207b413
Patch
Third Party Advisory
https://github.com/ZoneMinder/zoneminder/releases/tag/1.34.21
Release Notes
Third Party Advisory
https://forums.zoneminder.com/viewforum.php?f=1
Vendor Advisory
https://github.com/ZoneMinder/zoneminder/commit/9268db14a79c4ccd444c2bf8d24e62b13207b413
Patch
Third Party Advisory
https://github.com/ZoneMinder/zoneminder/releases/tag/1.34.21
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*

Версия до 1.34.21 (исключая)

EPSS

Процентиль: 69%

0.01211

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2020-25729

CVSS3: 6.1

ubuntu

около 6 лет назад

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.

CVE-2020-25729

CVSS3: 6.1

debian

около 6 лет назад

ZoneMinder before 1.34.21 has XSS via the connkey parameter to downloa ...

GHSA-gmmw-m27p-f77m

github

больше 4 лет назад

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.

ALT-PU-2020-2881

CVSS3: 8.2

altlinux

около 6 лет назад

ALT-PU-2020-2881: package `zoneminder` update to version 1.34.21-alt1

EPSS

Процентиль: 69%

0.01211

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79