PT-2023-20330 · Unknown+2 · Zoneminder+2

Daniel Hofer · Publicado 2023-02-25 · Atualizado 2023-11-30 · CVE-2023-25825

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.36.33

Description The issue concerns ZoneMinder, a free, open source Closed-circuit television software application for Linux. It supports IP, USB, and Analog cameras. Log entries can be injected into the database logs, containing a malicious referrer field. This field is unescaped when viewing the logs in the web UI, leading to Cross-site Scripting.

Recommendations For versions prior to 1.36.33, update to version 1.36.33 to resolve the issue. As a temporary workaround, consider restricting access to the web UI to minimize the risk of exploitation. Avoid viewing logs in the web UI until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2023-1939

ALT-PU-2023-2056

ALT-PU-2023-4121

ALT-PU-2023-7284

CVE-2023-25825

GHSA-68VF-G4QM-JR6V

Produtos afetados

Alt Linux

Debian

Zoneminder

Referências · 59

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_snapshots.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_lang_exec.rb · Exploit
• 🔥 https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-68vf-g4qm-jr6v · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39290.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39285.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26037.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39289.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39291.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25825.json · Exploit
• 🔥 https://github.com/rvizx/CVE-2023-26035 · Exploit
• 🔥 https://github.com/heapbytes/CVE-2023-26035 · Exploit
• 🔥 https://github.com/Yuma-Tsushima07/CVE-2023-26035 · Exploit
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-h5m9-6jjc-cgmw · Nota
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-xgv6-qv6c-399q · Nota
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-h6xp-cvwv-q433 · Nota