NetSight
IP …
high8.5

CVE-2023-29450

JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Z…

Impact

JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.

Affected products

VendorProductAffected versions
ZabbixZabbix
through 5.0.33
from 6.0.0 through 6.0.15
from 6.4.0 through 6.4.1
from 6.4.3 through 6.4.4

Weakness classification

CWE-200CWE-552

References