CVE-2024-22119

MEDIUM

Zabbix - Improper Input Validation Leading to Information Disclosure

Title source: llm

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section.

Core 3

Core References

Exploit, Issue Tracking, Patch, Vendor Advisory

Mailing List

Mailing List

CVSS v3 5.5

EPSS 0.0066

EPSS Percentile 46.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-20 CWE-79

Status published

Products (2)

zabbix/zabbix 7.0.0 alpha1 (7 CPE variants)

zabbix/zabbix 5.0.0 - 5.0.40

Published Feb 09, 2024

Tracked Since Feb 18, 2026