Логотип exploitDog
bind:CVE-2022-30768
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-30768

Количество 4

Количество 4

ubuntu логотип

CVE-2022-30768

около 3 лет назад

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2022-30768

около 3 лет назад

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2022-30768

около 3 лет назад

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-mjxc-g8h2-2g9g

около 3 лет назад

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-30768

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.

CVSS3: 5.4
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2022-30768

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.

CVSS3: 5.4
0%
Низкий
около 3 лет назад
debian логотип
CVE-2022-30768

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows ...

CVSS3: 5.4
0%
Низкий
около 3 лет назад
github логотип
GHSA-mjxc-g8h2-2g9g

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.

CVSS3: 5.4
0%
Низкий
около 3 лет назад

Уязвимостей на страницу