CVE-2022-23133 Stored XSS in host groups configuration window in Zabbix Frontend

2021-12-0800:00:00

CWE-79

Zabbix

www.cve.org

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

An authenticated user can create a hosts group from the configuration with XSS payload, which will be available for other users. When XSS is stored by an authenticated malicious actor and other users try to search for groups during new host creation, the XSS payload will fire and the actor can steal session cookies and perform session hijacking to impersonate users or take over their accounts.

CNA Affected

[
  {
    "product": "Frontend",
    "vendor": "Zabbix",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0 – 5.0.18"
      },
      {
        "status": "affected",
        "version": "5.4.0 – 5.4.8"
      },
      {
        "lessThan": "5.0.19*",
        "status": "unaffected",
        "version": "5.0.19",
        "versionType": "custom"
      },
      {
        "lessThan": "5.4.9*",
        "status": "unaffected",
        "version": "5.4.9",
        "versionType": "custom"
      }
    ]
  }
]