Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Zabbix Frontend — FEDORA-2022-19a9053f17 Clear all filters
TI-2022-08726 CVE-2022-24919 · GHSA-cf7c-p4p5-gq5x

Reflected XSS in graph configuration window of Zabbix Frontend

Priority LOW 23

An authenticated user can create a link with reflected Javascript code inside it for graphs’ page and send it to other users.

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.01222 Published 2022-03-09 Fixed in 4.0.39rc1, 5.0.21rc1 +2 CWE-79
TI-2022-08725 CVE-2022-24918 · GHSA-3p6x-mw8p-qjh9

Reflected XSS in item configuration window of Zabbix Frontend

Priority LOW 23

An authenticated user can create a link with reflected Javascript code inside it for items’ page and send it to other users.

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.01161 Published 2022-03-09 Fixed in 5.0.21rc1, 5.4.11rc1 +1 CWE-79
TI-2022-08724 CVE-2022-24917 · GHSA-87fp-835h-vrgc

Reflected XSS in service configuration window of Zabbix Frontend

Priority LOW 23

An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other users.

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.01222 Published 2022-03-09 Fixed in 4.0.39rc1, 5.0.21rc1 +1 CWE-79
TI-2022-08227 CVE-2022-24349 · GHSA-vv83-2f3m-pvxg

Reflected XSS in action configuration window of Zabbix Frontend

Priority LOW 24

An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.01222 Published 2022-03-09 Fixed in 4.0.39rc1, 5.0.21rc1 +2 CWE-79