What is the vulnerability ID for this XSS vulnerability?

The vulnerability ID for this XSS vulnerability is CVE-2023-29455.

What is a reflected XSS attack?

A reflected XSS attack, also known as a non-persistent attack, occurs when a malicious script is reflected off a web application to the victim's browser.

How does a reflected XSS attack work?

A reflected XSS attack works by sending a request to a vulnerable website, which then reflects a malicious script onto the victim's browser.

What software is affected by this XSS vulnerability?

The Zabbix Frontend software versions 4.0.0 to 4.0.45 and 5.0.0 to 5.0.33 are affected by this XSS vulnerability.

What is the severity of CVE-2023-29455?

The severity of CVE-2023-29455 is medium, with a CVSS score of 6.1.

How can I fix this XSS vulnerability?

To fix this XSS vulnerability, it is recommended to update the Zabbix Frontend software to a version that is not affected by the vulnerability. Refer to the vendor's website or security advisory for detailed instructions.

Vulnerability/
CVE-2023-29455

medium

6.1

CWE

79 20

13/7/2023

21/10/2024

CVE-2023-29455: Reflected XSS in several fields of graph form

First published: Thu Jul 13 2023(Updated: )

Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script is activated through a link, which sends a request to a website with a vulnerability that enables execution of malicious scripts.

Credit: security@zabbix.com security@zabbix.com

Affected Software	Affected Version	How to fix
Zabbix Frontend	>=5.0.0<=5.0.33
Zabbix Frontend	>=4.0.0<=4.0.45

Remedy

https://support.zabbix.com/browse/ZBX-22986

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for this XSS vulnerability?
The vulnerability ID for this XSS vulnerability is CVE-2023-29455.
What is a reflected XSS attack?
A reflected XSS attack, also known as a non-persistent attack, occurs when a malicious script is reflected off a web application to the victim's browser.
How does a reflected XSS attack work?
A reflected XSS attack works by sending a request to a vulnerable website, which then reflects a malicious script onto the victim's browser.
What software is affected by this XSS vulnerability?
The Zabbix Frontend software versions 4.0.0 to 4.0.45 and 5.0.0 to 5.0.33 are affected by this XSS vulnerability.
What is the severity of CVE-2023-29455?
The severity of CVE-2023-29455 is medium, with a CVSS score of 6.1.
How can I fix this XSS vulnerability?
To fix this XSS vulnerability, it is recommended to update the Zabbix Frontend software to a version that is not affected by the vulnerability. Refer to the vendor's website or security advisory for detailed instructions.

collector/nvd-latest
collector/nvd-index
agent/weakness
agent/references
agent/author
agent/type
agent/softwarecombine
agent/remedy
agent/description
collector/nvd-api
agent/software-canonical-lookup-request
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/severity
agent/tags
agent/title
agent/first-publish-date
agent/event
vendor/zabbix
canonical/zabbix frontend
version/zabbix frontend/5.0.0
version/zabbix frontend/5.0.33
version/zabbix frontend/4.0.0
version/zabbix frontend/4.0.45

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.