CVE-2022-23133mediumCWE-79

CVE-2022-23133: medium-severity vulnerability in Zabbix Frontend

Stored XSS in host groups configuration window in Zabbix Frontend

Published · Updated

Follow this CVE+ Monitor Frontend+ Monitor zabbix

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 1.1%
An authenticated user can create a hosts group from the configuration with XSS payload, which will be available for other users. When XSS is stored by an authenticated malicious actor and other users try to search for groups during new host creation, the XSS payload will fire and the actor can steal session cookies and perform session hijacking to impersonate users or take over their accounts.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Zabbix · Frontend
Related CVEs — Zabbix Frontend

In the same product, most dangerous first.

CVE-2022-23131CRITICALUnsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAMLEPSS 95.7%KEVCVE-2022-23134LOWPossible view of the setup pages by unauthenticated users if config file already existsEPSS 95.3%KEVCVE-2022-43515MEDIUMX-Forwarded-For header is active by default causes access to Zabbix sites in maintenance modeEPSS 1.3%CVE-2022-24919LOWReflected XSS in graph configuration window of Zabbix FrontendEPSS 1.2%CVE-2022-24917LOWReflected XSS in service configuration window of Zabbix FrontendEPSS 1.2%CVE-2022-24349MEDIUMReflected XSS in action configuration window of Zabbix FrontendEPSS 1.2%