CVE-2022-40626

4.8

MEDIUMCVSS v3

Published

September 14, 2022

Affected

11 projects

Assigned by

[email protected]

Severity scale

010

Description

An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.

zabbix

Python Package IndexPython module to work with zabbix.

= 6.2.0, >= 6.0.0, <= 6.0.6NVD

zabbix

Crates.iozabbix

= 6.2.0, >= 6.0.0, <= 6.0.6NVD

Zabbix

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Package Description

= 6.2.0, >= 6.0.0, <= 6.0.6NVD

zabbix

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

= 6.2.0, >= 6.0.0, <= 6.0.6NVD

zabbix

RubyGemssend data to zabbix from ruby

= 6.2.0, >= 6.0.0, <= 6.0.6NVD

zabbix/zabbix

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

= 6.2.0, >= 6.0.0, <= 6.0.6NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 37NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 37NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 37NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 37NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 37NVD

Security Advisories

CVE-2022-40626

Description

More on this CVE