All vulnerabilities

Servers and applications

CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles (Admin and Superadmin). Administrative privileges should be typically granted to users who need to perform tasks that require more control over the system. The security risk is…

Severity
Medium 4.9
Published
13 Jul 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ZabbixServers and applications · cpe:a:zabbix:zabbix
  • From 6.4.1 up to 6.4.4
  • Version 6.4.0-rc4
  • Version 6.4.0-rc3
  • Version 6.4.0-rc2
All 13 release lines
  • Every version up to 5.0.31
  • From 6.0.0 up to 6.0.13
  • Version 6.4.0-alpha1
  • Version 6.4.0-beta1
  • Version 6.4.0-beta2
  • Version 6.4.0-beta3
  • Version 6.4.0-beta4
  • Version 6.4.0-beta5
  • Version 6.4.0-beta6
  • Version 6.4.0-rc2
  • Version 6.4.0-rc3
  • Version 6.4.0-rc4
  • From 6.4.1 up to 6.4.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-29449
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-29449