Description
An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zabbix | Frontend | 6.0.0-6.0.6, 6.2.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | zabbix | 1:6.0.7+dfsg-2 | — |
| Debian 13 | zabbix | 1:6.0.7+dfsg-2 | — |
| Debian 12 | zabbix | 1:6.0.7+dfsg-2 | — |
References
- https://support.zabbix.com/browse/ZBX-21350
- FEDORA-2022-0d56cb7ee4 vendor-advisory