CVE-2023-41884

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Aug 12, 2024

Updated: Sep 13, 2024

CWE ID 89

Summary

CVE-2023-41884 is a vulnerability affecting ZoneMinder, an open-source CCTV software. The issue lies in the WWW/AJAX/watch.php file, specifically line 51, where input parameters are not sanitized before being used in an SQL query. This oversight exposes the system to SQL injection attacks. The vulnerability has been addressed in version 1.36.34.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

ZoneMinder

Affected Vendors

Zoneminder

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sj4IB2
https://www.cve.org/CVERecord?id=CVE-2023-41884
https://nvd.nist.gov/vuln/detail/CVE-2023-41884

Back to Vulnerability Database