{ "id": "CVE-2024-43359", "sourceIdentifier": "security-advisories@github.com", "published": "2024-08-12T21:15:33.580", "lastModified": "2024-08-13T12:58:25.437", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61." }, { "lang": "es", "value": "ZoneMinder es una aplicaci\u00f3n de software de circuito cerrado de televisi\u00f3n de c\u00f3digo abierto y gratuita. ZoneMinder tiene una vulnerabilidad de cross site scripting en la revisi\u00f3n del montaje a trav\u00e9s de los par\u00e1metros de intervalo de visualizaci\u00f3n, velocidad y escala. Esta vulnerabilidad se solucion\u00f3 en 1.36.34 y 1.37.61." } ], "metrics": { "cvssMetricV31": [ { "source": "security-advisories@github.com", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "baseSeverity": "NONE" }, "exploitabilityScore": 3.9, "impactScore": 0.0 } ] }, "weaknesses": [ { "source": "security-advisories@github.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-79" } ] } ], "references": [ { "url": "https://github.com/ZoneMinder/zoneminder/commit/6cc64dddff6144a98680f65ecf8dc249028431af", "source": "security-advisories@github.com" }, { "url": "https://github.com/ZoneMinder/zoneminder/commit/b51c5df0cb869ca48fccfc6e6fd7c19bf717ecd2", "source": "security-advisories@github.com" }, { "url": "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-pjjm-3qxp-6hj8", "source": "security-advisories@github.com" } ] }