Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2h5x-h7x4-hm9h

Опубликовано: 24 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.7

Описание

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

EPSS

Процентиль: 16%
0.00248
Низкий

7.7 High

CVSS4

Дефекты

CWE-78

Связанные уязвимости

ubuntu
4 месяца назад

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

nvd
4 месяца назад

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

debian
4 месяца назад

Host and event action script input is validated with a regex (set by t ...

CVSS3: 8.8
fstec
4 месяца назад

Уязвимость системы мониторинга ИТ-инфраструктуры Zabbix, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольные команды

CVSS3: 8.8
redos
4 месяца назад

Уязвимость zabbix7.4

EPSS

Процентиль: 16%
0.00248
Низкий

7.7 High

CVSS4

Дефекты

CWE-78