CVE-2024-43359 in ZoneMinder

Riassunto

di MITRE • 13/08/2024

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: GitHub M
• Prenotare: 09/08/2024
• Divulgazione: 13/08/2024
• Moderazione: accettato
• Voce: VDB-274245
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (NVD)
• EPSS: 0.00375
• KEV: no
• Attività: molto basso
• Settore: Government, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-43359
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-43359
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-43359/