Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v7c2-5wfc-rfff

Опубликовано: 06 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.3
CVSS3: 6.8

Описание

An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip.

An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip.

EPSS

Процентиль: 18%
0.00263
Низкий

7.3 High

CVSS4

6.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.8
ubuntu
6 месяцев назад

An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip.

CVSS3: 6.8
nvd
6 месяцев назад

An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip.

CVSS3: 6.8
debian
6 месяцев назад

An authenticated (non-super) administrator can create a maintenance pe ...

CVSS3: 8.4
fstec
6 месяцев назад

Уязвимость пользовательского интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.4
redos
4 месяца назад

Уязвимость zabbix7.4

EPSS

Процентиль: 18%
0.00263
Низкий

7.3 High

CVSS4

6.8 Medium

CVSS3

Дефекты

CWE-79