Lucene search
K

4 matches found

AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.3 views

Astra Linux – Vulnerability in Zabbix

The endpoint /zabbix.php?action=export.valuemaps is vulnerable to a Cross-Site Scripting attack due to the backurl parameter. This vulnerability arises from the reflection of user-provided data without proper HTML escaping or output encoding. As a result, a JavaScript payload may be injected into...

7.5CVSS7.2AI score0.00308EPSS
Exploits0References3
OSV
OSV
added 2025/04/02 7:15 a.m.13 views

CVE-2024-45699

The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the abo...

5.4CVSS6.3AI score
Exploits0References2
OSV
OSV
added 2025/04/02 7:15 a.m.1 views

UBUNTU-CVE-2024-45699

The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the abo...

7.5CVSS5.7AI score0.00308EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/02 6:12 a.m.14 views

CVE-2024-45699 Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps

The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the abo...

7.5CVSS0.00308EPSS
Exploits0References1
Rows per page
Query Builder