by Kastro
Paper/Archive/CVE-2023-32725

CVE-2023-32725

Zabbix Zabbix — Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.

EPSS 0.8%CVSS 9.6
critical.is priorityof 100
40
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 58.1.581 × 2011.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.

Affected

ProductAffectedFixed inSource
Zabbix6.0.0 – 6.0.21–CNA
Zabbix6.4.0 – 6.4.6–CNA
Zabbix7.0.0alpha1 – 7.0.0alpha3–CNA

Scores by source

Zabbix (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

refsupport.zabbix.com/browse/ZBX-23854