Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-29457

Insufficient validation of Action form input fields

Description

Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can be sent as request to a website with a vulnerability that enables execution of malicious scripts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: affected

  • 4.0.0 to ≤ 4.0.45affected
  • 5.0.0 to ≤ 5.0.34affected
  • 6.0.0 to ≤ 6.0.17affected

References