ZoneMinder Security Update Advisory (CVE-2024-43360)

Overview
 

An update has been released to address vulnerabilities in ZoneMinder. Users of the affected versions are advised to update to the latest version.

 

Affected Products

CVE-2024-43360

  • ZoneMinder versions: ~ 1.36.33 (inclusive)
  • ZoneMinder versions: ~ 1.37.43 (inclusive)

 

Resolved Vulnerabilities

Time-based SQL injection vulnerability in ZoneMinder (CVE-2024-43360)

 

Vulnerability Patches

The following product-specific Vulnerability Patches are available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

CVE-2024-43360

  • ZoneMinder version: 1.36.34
  • ZoneMinder version: 1.37.61

 

 

References

[1] CVE-2024-43360 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-43360