vulnerability
Zoneminder
Critical
Summary
A critical Remote Code Execution (RCE) vulnerability exists in Zoneminder versions 1.37.48 and 1.38.3, allowing authenticated users to execute arbitrary operating system commands. The vulnerability stems from an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') flaw within the event export functionality. CISA recommends immediate upgrading to version 1.38.3 or later.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data