Is CVE-2024-58386 being exploited?

No public exploit is currently tracked.

How severe is CVE-2024-58386?

CVE-2024-58386 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2024-58386

Description

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not properly validated before being passed to output_file, enabling attackers with Events view permission to access sensitive files like configuration files containing database credentials.