CVE-2023-29457
MEDIUMZabbix Frontend 4.0.0-4.0.44 - Reflected Cross-Site Scripting via Action Form Fields
Title source: llmDescription
Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can be sent as request to a website with a vulnerability that enables execution of malicious scripts.
References (3)
Core 3
Core References
Patch, Vendor Advisory
https://support.zabbix.com/browse/ZBX-22988
Scores
CVSS v3
6.3
EPSS
0.0053
EPSS Percentile
40.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-20
CWE-79
Status
published
Products (1)
zabbix/frontend
4.0.0 - 4.0.45
Published
Jul 13, 2023
Tracked Since
Feb 18, 2026