Описание
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | fixed | 1:6.0.23+dfsg-1 | package | |
| zabbix | no-dsa | bookworm | package |
Примечания
https://support.zabbix.com/browse/ZBX-23389
possible upstream fix (4.0.x) https://github.com/zabbix/zabbix/commit/d05854bc0e638bbc0c2077ded09797648dba0911
EPSS
Связанные уязвимости
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
Уязвимость интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю проводить межсайтовые сценарные атаки
EPSS