Total vulnerabilities in the database
JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.
| Software | From | Fixed in |
|---|---|---|
| zabbix / zabbix | 6.4.3 | 6.4.4.x |
| zabbix / zabbix | - | 5.0.33.x |
| zabbix / zabbix | 6.0.0 | 6.0.15.x |
| zabbix / zabbix | 6.4.0 | 6.4.1.x |