Lucene search

PRIOn knowledge basePRION:CVE-2023-32723

HistoryOct 12, 2023 - 7:15 a.m.

Cross site request forgery (csrf)

2023-10-1207:15:00

PRIOn knowledge base

www.prio-n.com

csrf protection

ldap request order

nvd

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.2%

Request to LDAP is sent before user permissions are checked.

CPENameOperatorVersion
zabbixeq5.0.0 alpha3
zabbixeq4.0.19 rc1
zabbixeq4.4.7 rc1
zabbixge4.4.0
zabbixlt4.4.7
zabbixge4.0.0
zabbixlt4.0.19

Name	Operator	Version
zabbix	eq	5.0.0 alpha3
zabbix	eq	4.0.19 rc1
zabbix	eq	4.4.7 rc1
zabbix	ge	4.4.0
zabbix	lt	4.4.7
zabbix	ge	4.0.0
zabbix	lt	4.0.19

References

lists.debian.org/debian-lts-announce/2024/01/msg00012.html

support.zabbix.com/browse/ZBX-23230