CVE-2023-32725
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.
| Software | From | Fixed in |
|---|---|---|
| zabbix / zabbix_server | 7.0.0-alpha1 | 7.0.0-alpha1.x |
| zabbix / zabbix_server | 7.0.0-alpha2 | 7.0.0-alpha2.x |
| zabbix / zabbix_server | 7.0.0-alpha3 | 7.0.0-alpha3.x |
| zabbix / zabbix_server | 6.4.0 | 6.4.6.x |
| zabbix / zabbix_server | 6.0.0 | 6.0.21.x |
| zabbix / frontend | 7.0.0-alpha3 | 7.0.0-alpha3.x |
| zabbix / frontend | 7.0.0-alpha2 | 7.0.0-alpha2.x |
| zabbix / frontend | 7.0.0-alpha1 | 7.0.0-alpha1.x |
| zabbix / frontend | 6.4.0 | 6.4.6.x |
| zabbix / frontend | 6.0.0 | 6.0.21.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime