CVE-2024-36465

🗓️ 02 Apr 2025 06:11:26Reported by ZabbixType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1552 Views🌐 WEB

SQL injection vulnerability in Zabbix API allows privilege escalation via groupBy parameter.

Reporter	Title	Published	Views	Family All 23
AlpineLinux	CVE-2024-36465	2 Apr 202506:15	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в zabbix	20 May 202605:53	–	astralinux
Circl	CVE-2024-36465	2 Apr 202506:34	–	circl
CNNVD	Zabbix SQL注入漏洞	2 Apr 202500:00	–	cnnvd
Cvelist	CVE-2024-36465 SQL injection in Zabbix API	2 Apr 202506:11	–	cvelist
Debian CVE	CVE-2024-36465	2 Apr 202506:11	–	debiancve
EUVD	EUVD-2025-9502	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 41 Update: zabbix-7.0.11-1.fc41	11 Apr 202501:26	–	fedora
Tenable Nessus	Fedora 41 : zabbix (2025-a7a06a72c8)	11 Apr 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-36465	30 Aug 202500:00	–	nessus

NVD

Node

zabbix zabbixRange7.0.0–7.0.7

zabbix zabbixRange7.2.0–7.2.2

zabbix zabbixMatch7.0.8rc1

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Zabbix API"
    ],
    "product": "Zabbix",
    "repo": "https://git.zabbix.com/",
    "vendor": "Zabbix",
    "versions": [
      {
        "changes": [
          {
            "at": "7.0.8rc2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "7.0.7",
        "status": "affected",
        "version": "7.0.0",
        "versionType": "git"
      },
      {
        "changes": [
          {
            "at": "7.2.2rc1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "7.2.1",
        "status": "affected",
        "version": "7.2.0",
        "versionType": "git"
      }
    ]
  }
]