Описание
ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. NOTE: this is disputed by the Supplier because there is no unsanitized user input to web/views/image.php.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needed | |
| esm-apps/noble | needed | |
| esm-apps/resolute | needed | |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| jammy | needed | |
| noble | needed | |
| questing | ignored | end of life, was needs-triage |
Показывать по
9.8 Critical
CVSS3
Связанные уязвимости
ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. NOTE: this is disputed by the Supplier because there is no unsanitized user input to web/views/image.php.
ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/im ...
ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function.
ALT-PU-2024-18547: package `zoneminder` update to version 1.36.35-alt1
9.8 Critical
CVSS3