CVE-2024-45177

Опубликовано: 04 сент. 2024

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper input validation, the C-MOR web interface is vulnerable to persistent cross-site scripting (XSS) attacks. It was found out that the camera configuration is vulnerable to a persistent cross-site scripting attack due to insufficient user input validation.

Ссылки

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-021.txt
Exploit
Vendor Advisory
https://www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/9
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:*:*:*:*:*:*:*

cpe:2.3:a:c-mor:c-mor_video_surveillance:6.00:patch_level_01:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00944

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-wvf7-c4v8-cmj9