← Back

CVE-2020-15803

nvd nist
Published: Jul 17, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.

Affected (18)

Products: Zabbix: Zabbix · Fedoraproject: Fedora · Debian: Debian Linux · +1 more
Show all products
Zabbix: Zabbix · Fedoraproject: Fedora · Debian: Debian Linux · Opensuse: Backports, Leap
Zabbix
1 product
Zabbix
Fedoraproject
1 product
Fedora
Debian
1 product
Debian Linux
Opensuse
2 products
Backports
Leap
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Zabbix
Zabbix
Up to 3.0.31
Zabbix
From 4.0.0 to 4.0.21
Zabbix
From 4.4 to 4.4.9
Zabbix
From 5.0.0 to 5.0.1
Zabbix
Version 3.0.32 rc1
Zabbix
Version 4.0.22
Zabbix
Version 4.0.22 rc1
Zabbix
Version 4.4.10
Zabbix
Version 4.4.10 rc1
Zabbix
Version 5.0.2
Zabbix
Version 5.0.2 rc1
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 31
Fedora
Version 32
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Backports
Version sle-15 sp1
Backports
Version sle-15 sp2
Opensuse
Leap
Version 15.1
Leap
Version 15.2

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (14)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.