Description
Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Zabbix Zabbix
Default version status: unknown
6.0.44 to ≤ 6.0.45affected7.0.22 to ≤ 7.0.24affected7.4.6 to ≤ 7.4.8affected