UpHeron
All vulnerabilities

Servers and applications

CVE-2023-29450

JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.

Severity
High 7.5
Published
13 Jul 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ZabbixServers and applications · cpe:a:zabbix:zabbix
  • Every version up to 5.0.33
  • From 6.0.0 up to 6.0.15
  • From 6.4.0 up to 6.4.1
  • From 6.4.3 up to 6.4.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-29450
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-29450