Note:
This project will be discontinued after December 13, 2021. [more]
2019-02-04
A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful.
| Products | Zoneminder |
| Type | Cross-Site Request Forgery (CSRF) (CWE-352) |
| First patch | - None (likely due to unavailable code) |
| Links | https://github.com/ZoneMinder/zoneminder/issues/2469 |