tocsin

Debian/zoneminder: unknown

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

Action: Upgrade zoneminder to 1.23.3-1 or later.

Affected

introducedfixedlast affected
01.23.3-1-

Fixed versions

1.23.3-1

Sources

published · modified · JSON