Home > Vulnerability Database > CVE-2023-32721

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2023-32721

Date: October 12, 2023

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.

Language: C

Severity Score

7.6

Related Resources (5)

Url: https://security-tracker.debian.org/tracker/CVE-2023-32721

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-32721

Url: https://lists.debian.org/debian-lts-announce/2024/01/msg00012.html

Url: https://support.zabbix.com/browse/ZBX-23389

Url: https://www.mend.io/vulnerability-database/CVE-2023-32721

Severity Score

7.6

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

Improper Input Validation

CWE-20

CVSS v3.1

Base Score:	7.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	HIGH
Availability (A):	NONE

Do you need more information?

Contact Us