UpHeron
All vulnerabilities

Servers and applications

CVE-2024-22116

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure.

Severity
High 7.2
Published
12 Aug 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ZabbixServers and applications · cpe:a:zabbix:zabbix
  • Version 7.0.0-rc2
  • Version 7.0.0-rc1
  • Version 7.0.0-beta3
  • Version 7.0.0-beta2
All 15 release lines
  • From 6.4.9 up to 6.4.15
  • Version 7.0.0-alpha1
  • Version 7.0.0-alpha2
  • Version 7.0.0-alpha3
  • Version 7.0.0-alpha4
  • Version 7.0.0-alpha5
  • Version 7.0.0-alpha6
  • Version 7.0.0-alpha7
  • Version 7.0.0-alpha8
  • Version 7.0.0-alpha9
  • Version 7.0.0-beta1
  • Version 7.0.0-beta2
  • Version 7.0.0-beta3
  • Version 7.0.0-rc1
  • Version 7.0.0-rc2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-22116
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-22116