NetSight
IP …
medium6.1

CVE-2020-15803

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.

Impact

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.

Affected products

VendorProductAffected versions
ZabbixZabbix
through 3.0.31
from 4.0.0 through 4.0.21
from 4.4 through 4.4.9
from 5.0.0 through 5.0.1
Versions 3.0.32, 4.0.22
FedoraprojectFedora
Versions 31, 32
DebianDebian Linux
Version 9.0
OpensuseBackports
Version sle-15
OpensuseLeap
Versions 15.1, 15.2

Weakness classification

CWE-79

References