{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-24349", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "assignerShortName": "Zabbix", "dateUpdated": "2023-04-12T00:00:00", "dateReserved": "2022-02-02T00:00:00", "datePublished": "2022-03-09T00:00:00"}, "containers": {"cna": {"title": "Reflected XSS in action configuration window of Zabbix Frontend", "datePublic": "2022-02-01T00:00:00", "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2023-04-12T00:00:00"}, "descriptions": [{"lang": "en", "value": "An authenticated user can create a link with reflected XSS payload for actions\u2019 pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim\u2019s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel."}], "affected": [{"vendor": "Zabbix", "product": "Frontend", "versions": [{"version": "4.0.0-4.0.38", "status": "affected"}, {"version": "5.0.0-5.0.20", "status": "affected"}, {"version": "5.4.0-5.4.10", "status": "affected"}, {"version": "6.0", "status": "affected"}, {"version": "4.0.39rc1", "status": "unaffected", "lessThan": "unspecified", "versionType": "custom"}, {"version": "5.0.21rc1", "status": "unaffected", "lessThan": "unspecified", "versionType": "custom"}, {"version": "5.4.11rc1", "status": "unaffected", "lessThan": "unspecified", "versionType": "custom"}, {"version": "6.0.1rc1", "status": "unaffected", "lessThan": "unspecified", "versionType": "custom"}]}], "references": [{"url": "https://support.zabbix.com/browse/ZBX-20680"}, {"name": "FEDORA-2022-5fab125c08", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V4N22R3QVTYAJMWFK2U2O6QXAZYM35Z/"}, {"name": "FEDORA-2022-d714c0d39c", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWDZONUHDYKBXTAIAGHSYQDEGORD2QT7/"}, {"name": "FEDORA-2022-19a9053f17", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QWP6UBFA5T6MOQPY2VDUG5YAJBFPYRFF/"}, {"name": "[debian-lts-announce] 20220412 [SECURITY] [DLA 2980-1] zabbix security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00011.html"}, {"name": "[debian-lts-announce] 20230412 [SECURITY] [DLA 3390-1] zabbix security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html"}], "credits": [{"lang": "en", "value": "internal research"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW", "baseScore": 4.6, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-79 Cross-site Scripting (XSS)", "cweId": "CWE-79"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"discovery": "INTERNAL"}, "workarounds": [{"lang": "en", "value": "The vulnerability can be exploited only by authenticated users. If an immediate update is not possible, review user access rights to your Zabbix Frontend, be attentive to browser warnings and always check any links you can receive via email or other means of communication, which lead to the actionconf.php page of Zabbix Frontend and contain suspicious parameters with special symbols. If you have clicked on the suspicious link, do not fill out the opened form."}], "solutions": [{"lang": "en", "value": "To remediate this vulnerability, apply the updates"}]}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*", "matchCriteriaId": "708A44D7-726F-4D4A-BB10-3B926689CA07", "versionEndIncluding": "4.0.38", "versionStartIncluding": "4.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*", "matchCriteriaId": "BE339A00-AE42-4A9E-9B1B-D5D120BE0512", "versionEndIncluding": "5.0.20", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*", "matchCriteriaId": "1DF7E86D-391F-4E99-9F16-4C0A98C87D08", "versionEndIncluding": "5.4.10", "versionStartIncluding": "5.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:frontend:6.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "39A4F9FB-A20A-4AB0-A502-8526FD992FF2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*", "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*", "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An authenticated user can create a link with reflected XSS payload for actions\u2019 pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim\u2019s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel."}, {"lang": "es", "value": "Un usuario autenticado puede crear un enlace con carga \u00fatil XSS reflejada para las p\u00e1ginas de acciones, y enviarlo a otros usuarios. El c\u00f3digo malicioso tiene acceso a todos los mismos objetos que el resto de la p\u00e1gina web y puede realizar modificaciones arbitrarias en el contenido de la p\u00e1gina que se muestra a la v\u00edctima. Este ataque puede ser implementado con la ayuda de la ingenier\u00eda social y la expiraci\u00f3n de una serie de factores - un atacante debe tener acceso autorizado al Zabbix Frontend y permitir la conexi\u00f3n de red entre un servidor malicioso y el ordenador de la v\u00edctima, entender la infraestructura atacada, ser reconocido por la v\u00edctima como un administrador y utilizar el canal de comunicaci\u00f3n de confianza"}], "id": "CVE-2022-24349", "lastModified": "2023-11-07T03:44:27.063", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.4, "source": "security@zabbix.com", "type": "Secondary"}]}, "published": "2022-03-09T20:15:08.563", "references": [{"source": "security@zabbix.com", "tags": ["Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00011.html"}, {"source": "security@zabbix.com", "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html"}, {"source": "security@zabbix.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V4N22R3QVTYAJMWFK2U2O6QXAZYM35Z/"}, {"source": "security@zabbix.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QWP6UBFA5T6MOQPY2VDUG5YAJBFPYRFF/"}, {"source": "security@zabbix.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWDZONUHDYKBXTAIAGHSYQDEGORD2QT7/"}, {"source": "security@zabbix.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://support.zabbix.com/browse/ZBX-20680"}], "sourceIdentifier": "security@zabbix.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@zabbix.com", "type": "Secondary"}]}

{}