Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-22117


When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element.


Published

2024-11-26T15:15:31.510

Last Modified

2025-10-08T16:05:30.650

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 2.2 (LOW)

Weaknesses
  • Type: Secondary
    CWE-20

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zabbix zabbix < 5.0.44 Yes
Application zabbix zabbix < 6.0.34 Yes
Application zabbix zabbix < 6.4.19 Yes
Application zabbix zabbix < 7.0.4 Yes

References