DeutschShown in its original language — a full translation is planned for a future version.
Zabbix: Mehrere Schwachstellen
view advisory published 2023-07-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Zustand herbeizuführen und um nicht näher beschriebene Auswirkungen zu verursachen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-29458US | high7.5 | — | ||
Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue o… | ||||
| CVE-2023-29457US | medium6.1 | — | ||
Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can b… | ||||
| CVE-2023-29456US | medium5.4 | — | ||
URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with interne… | ||||
| CVE-2023-29455US | medium6.1 | — | ||
Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script is activated throu… | ||||
| CVE-2023-29454US | medium5.4 | — | ||
Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload (e.g., in… | ||||
| CVE-2023-29452US | medium5.4 | — | ||
Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attribution text” when selected “Other” Tile provider.
| ||||
| CVE-2023-29451US | high7.5 | — | ||
Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy. | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-3538 vom 2023-08-22external
- Debian Security Advisory DLA-3909 vom 2024-10-03external
- ZABBIX BUGS AND ISSUES vom 2023-07-13external
- ZABBIX BUGS AND ISSUES vom 2023-07-13external
- ZABBIX BUGS AND ISSUES vom 2023-07-13external
- ZABBIX BUGS AND ISSUES vom 2023-07-13external
- ZABBIX BUGS AND ISSUES vom 2023-07-13external
- ZABBIX BUGS AND ISSUES vom 2023-07-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan