Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-45699

The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.

Published

2025-04-02T07:15:41.427

Last Modified

2025-11-03T20:16:30.800

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zabbix zabbix < 6.0.37 Yes
Application zabbix zabbix < 6.4.21 Yes
Application zabbix zabbix < 7.0.7 Yes
References