CLEANSTART-2023-CZ33666

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2023/CLEANSTART-2023-CZ33666.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2023-CZ33666
Upstream
Published
2026-10-31T14:37:28Z
Modified
2026-10-31T15:45:44Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "t...
Details

Security vulnerability affects the zoneminder package. ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "td" brackets.

References

Affected packages

CleanStart / zoneminder

Package

Name
zoneminder
Purl
pkg:apk/cleanstart/zoneminder

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.36.31-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2023/CLEANSTART-2023-CZ33666.json"