Описание
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | fixed | 1:6.0.23+dfsg-1 | package | |
| zabbix | ignored | bookworm | package |
Примечания
https://support.zabbix.com/browse/ZBX-23389
possible upstream fix (4.0.x) https://github.com/zabbix/zabbix/commit/d05854bc0e638bbc0c2077ded09797648dba0911
EPSS
Связанные уязвимости
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
Уязвимость интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю проводить межсайтовые сценарные атаки
ALT-PU-2023-8850: package `zabbix` update to version 6.0.21-alt1
EPSS