CVE-2023-29452 — Remove possibility to add html into Geomap attribution field

CVE-2023-29452

Remove possibility to add html into Geomap attribution field PUBLISHED

Description (CNA)

Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attribution text” when selected “Other” Tile provider.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 6.0.0 through 6.0.17; affected 6.4.0 through 6.4.2; affected 7.0.0 through 7.0.0alpha1

CWE

CWE-20

References

https://support.zabbix.com/browse/ZBX-22981

ADP enrichment

CVE

No English description supplied.

https://support.zabbix.com/browse/ZBX-22981

CISA-ADP

No English description supplied.

No references supplied.