Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade zabbix | Aug 5, 2020 | Jul 17, 2020 |
| Suse | — | Upgrade zabbix-server-sqliteUpgrade zabbix-bash-completionUpgrade zabbix-proxyUpgrade zabbix-proxy-postgresqlUpgrade zabbix-proxy-mysqlUpgrade zabbix-server-mysqlUpgrade zabbix-serverUpgrade zabbix-phpfrontendUpgrade zabbix-proxy-sqliteUpgrade zabbix-agentUpgrade zabbix-java-gatewayUpgrade zabbix-server-postgresql | Aug 18, 2020 | Jul 17, 2020 |
| Ubuntu | — | Upgrade zabbix-proxy-mysql (Ubuntu Pro)Upgrade zabbix-server-mysql (Ubuntu Pro)Upgrade zabbix-proxy-pgsql (Ubuntu Pro)Upgrade zabbix-proxy-sqlite3 (Ubuntu Pro)Upgrade zabbix-agent (Ubuntu Pro)Upgrade zabbix-server-pgsql (Ubuntu Pro)Upgrade zabbix-java-gateway (Ubuntu Pro)Upgrade zabbix-frontend-php (Ubuntu Pro) | Mar 22, 2023 | Jul 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub