All errata/p11/ALT-PU-2024-18547-1
ALT-PU-2024-18547-1

Package update zoneminder in branch p11

Version1.36.35-alt1
Published2024-11-25
Max severityCRITICAL
Severity:

Closed issues (1)

CVE-2025-65791
CRITICAL9.8

ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. NOTE: this is disputed by the Supplier because there is no unsanitized user input to web/views/image.php.

Published: 2026-02-18Modified: 2026-03-11
CVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H