Описание
The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | fixed | 1:7.0.3+dfsg-1 | package | |
| zabbix | ignored | bookworm | package |
Примечания
https://support.zabbix.com/browse/ZBX-25611
Fixed by (merge commit): https://github.com/zabbix/zabbix/commit/223a21567b659366396781429a8d87009600784a (7.0.3rc1)
Fixed by (merge commit): https://github.com/zabbix/zabbix/commit/b88db679a85bcc22d2f270bf0bf736f4649b445c (7.0.3rc1)
Fixed by (merge commit): https://github.com/zabbix/zabbix/commit/a4117b60b61285cb1bb5000ba77127207758a675 (6.0.33rc1)
Fixed by (merge commit): https://github.com/zabbix/zabbix/commit/df7736664caf49b4a58d75b4410cff587be615f0 (5.0.43rc1)
EPSS
Связанные уязвимости
The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects.
The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects.
The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects.
Уязвимость метода atob универсальной системы мониторинга Zabbix, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
ALT-PU-2024-18029: package `zabbix` update to version 6.0.33-alt0.p10.2
EPSS