CVE-2024-58386GHSA-8fw2-wh82-vv4h
ZoneMinder 1.37.x Path Traversal via files view
ZoneMinder zoneminder
CVSS
7.1HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.37%Chance of exploitation activity in the next 30 days, higher than 29% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 1.38.0zoneminderCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not properly validated before being passed to output_file, enabling attackers with Events view permission to access sensitive files like configuration files containing database credentials.
Text from CVE List
Affected versions 1
- zoneminderaffected: 1.37.0 before 1.38.0CVE List
References 8
- github.com/ZoneMinder/zoneminder/commit/3b379e99c0c1e539334ad4186c15ad0dc6c238b9Fixvia CVE List
- github.com/ZoneMinder/zoneminder/commit/071d968bc8ecd5c4f56a87cbe0c3063bc35dbc5dFixvia CVE List
- github.com/ZoneMinder/zoneminder/releases/tag/1.38.0Fixvia CVE List
- github.com/ZoneMinder/zoneminder/security/advisories/GHSA-8fw2-wh82-vv4hAdvisoryvia CVE List
- vulncheck.com/advisories/zoneminder-1.37-x-path-traversal-via-files-viewAdvisoryvia CVE List
- github.com/ZoneMinder/zoneminderReferencevia CVE List
- github.com/ZoneMinder/zoneminder/issues/4472Referencevia CVE List
- github.com/ZoneMinder/zoneminder/blob/1.37.64/web/skins/classic/views/files.php#L26-L39Referencevia CVE List