CVE-2023-29452

medium · 5.5

Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attribution text” when selected “Other” Tile provider.

5.5

CVSS

64.1%

EPSS (exploit prob.)

99th

EPSS percentile

2023-07-13

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weaknesses

CWE-20CWE-79

Affected products

Vendor	Product	Affected versions
zabbix	zabbix	>= 6.0.0, <= 6.0.17
zabbix	zabbix	6.4.0
zabbix	zabbix	6.4.0
zabbix	zabbix	6.4.0
zabbix	zabbix	6.4.0
zabbix	zabbix	6.4.0
zabbix	zabbix	6.4.1
zabbix	zabbix	6.4.1
zabbix	zabbix	6.4.1

Check a specific version with /api/v1/cve/match.

References

https://support.zabbix.com/browse/ZBX-22981
https://support.zabbix.com/browse/ZBX-22981

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-29452