Skip to content
OpenAdvisories
Low WID-SEC-2022-0591 2 CVEs

Zabbix: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Jul 6, 2022 · Updated Oct 3, 2024 · Revision 6 · de-DE

Vendor: Debian Vendor: SUSE Vendor: Ubuntu Vendor: Zabbix Product: Linux Product: Linux Product: Linux Product: Zabbix Platform: Linux Platform: macOS

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Zabbix ist ein Open-Source Netzwerk-Monitoringsystem.

Vulnerabilities 2

  • Low 3.7
    CVE-2022-35229

    Reflected XSS in discovery page of Zabbix Frontend

    An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to…

    Zabbix Frontend zabbix zabbix Debian Ubuntu
  • Low 3.7
    CVE-2022-35230

    Reflected XSS in graphs page of Zabbix Frontend

    An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to pr…

    Zabbix Frontend zabbix zabbix Debian Ubuntu

Revision history

  1. #6

    Neue Updates von Debian aufgenommen

  2. #5

    Neue Updates von Ubuntu aufgenommen

  3. #4

    Neue Updates von Debian aufgenommen

  4. #3

    Neue Updates von Debian aufgenommen

  5. #2

    Neue Updates von SUSE aufgenommen

  6. #1

    Initiale Fassung

References