Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-29452

Remove possibility to add html into Geomap attribution field

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attribution text” when selected “Other” Tile provider.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: affected

  • 6.0.0 to ≤ 6.0.17affected
  • 6.4.0 to ≤ 6.4.2affected
  • 7.0.0 to ≤ 7.0.0alpha1affected

References