CVE-2023-32725

9.6CRITICAL

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particula

Published: 12/18/2023Updated: 11/21/2024
View on NVDView on MITRE

Description

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.

AI AnalysisPowered by AI

Affected Products

zabbixzabbix_server
zabbixzabbix_server
zabbixzabbix_server
7.0.0
zabbixzabbix_server
7.0.0
zabbixzabbix_server
7.0.0
zabbixfrontend
zabbixfrontend
zabbixfrontend
7.0.0
zabbixfrontend
7.0.0
zabbixfrontend
7.0.0

References