Log in Start free

Vulnerability · Published Oct 7, 2022 · Assigned by GitHub_M

CVE-2022-39290CSRF key bypass using HTTP methods in zoneminder

High 8.0

In plain English

A high-severity improper authentication in zoneminder from ZoneMinder. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 7.9% (higher than 95% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.0High
Exploit odds (30 days)7.9%top 5.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated users can bypass CSRF keys by modifying the request supplied to the Zoneminder web application. These modifications include replacing HTTP POST with an HTTP GET and removing the CSRF key from the request. An attacker can take advantage of this by using an HTTP GET request to perform actions with no CSRF protection. This could allow an attacker to cause an authenticated user to perform unexpected actions on the web application. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20zoneminder1.36.31-r0ALPINE-CVE-2022-39290
Alpine:v3.21zoneminder1.36.31-r0ALPINE-CVE-2022-39290
Alpine:v3.22zoneminder1.36.31-r0ALPINE-CVE-2022-39290
Alpine:v3.23zoneminder1.36.31-r0ALPINE-CVE-2022-39290
Alpine:v3.24zoneminder1.36.31-r0ALPINE-CVE-2022-39290
Debian:12zoneminder1.36.31+dfsg1-1DEBIAN-CVE-2022-39290
Debian:13zoneminder1.36.31+dfsg1-1DEBIAN-CVE-2022-39290
Debian:14zoneminder1.36.31+dfsg1-1DEBIAN-CVE-2022-39290
Ubuntu:24.04:LTSzoneminderno fix listedUBUNTU-CVE-2022-39290
Ubuntu:25.10zoneminderno fix listedUBUNTU-CVE-2022-39290
Ubuntu:26.04:LTSzoneminderno fix listedUBUNTU-CVE-2022-39290
Ubuntu:26.10zoneminderno fix listedUBUNTU-CVE-2022-39290

Affected products (as reported)

VendorProductVersions
ZoneMinder zoneminder < 1.36.27>= 1.37.0, < 1.37.24

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References