PT-2023-9162 · Zabbix+4 · Zabbix+4
Sergejs Maklakovs
·
Publicado
2023-11-22
·
Atualizado
2024-11-21
·
CVE-2024-22119
CVSS v2.0
5.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Zabbix (affected versions not specified)
Description
The issue is caused by improper validation of the form input field
Name on the Graph page in the Items section. This can lead to a cross-site scripting (XSS) attack, allowing a remote attacker to exploit the vulnerability. XSS is a type of attack where an attacker injects malicious scripts into a website, potentially allowing them to steal user data or take control of the user's session.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Debian
Suse
Zabbix