CVE-2019-13072

Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.

References

Affected packages

Git / github.com/zoneminder/zoneminder

Affected ranges

Type

GIT

Repo

https://github.com/zoneminder/zoneminder

Events

Introduced

077c643da0975a75a46255d5be1a1a2aeae62069

Last affected

077c643da0975a75a46255d5be1a1a2aeae62069

Database specific

{
    "cpe": "cpe:2.3:a:zoneminder:zoneminder:1.32.3:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.32.3"
        },
        {
            "last_affected": "1.32.3"
        }
    ]
}

Affected versions

1.*

1.32.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-13072.json"