Description (CNA)
JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Zabbix / Zabbix | affected 5.0 through 5.0.31; affected 6.0 through 6.0.13; affected 6.2 through 6.2.7; affected 6.4 through 6.4.0rc1 |
CWE
CWE-200, CWE-552
References
- https://support.zabbix.com/browse/ZBX-22588
- https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.