Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2023-29450

Unauthorized limited filesystem access from preprocessing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unaffected

  • 5.0 to ≤ 5.0.31affected
  • 6.0 to ≤ 6.0.13affected
  • 6.2 to ≤ 6.2.7affected
  • 6.4 to ≤ 6.4.0rc1affected

References