Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3101-1

Опубликовано: 06 сент. 2022
Источник: suse-cvrf

Описание

Security update for zabbix

This update for zabbix fixes the following issues:

  • CVE-2022-35230: Javascript embedded in links for graphs page will be executed (bsc#1201290).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
zabbix-agent-4.0.12-4.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
zabbix-agent-4.0.12-4.18.1

Ссылки

Описание

An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:zabbix-agent-4.0.12-4.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:zabbix-agent-4.0.12-4.18.1
Ссылки