CVE-2024-36465

8.8

HIGHCVSS v3

Published

April 2, 2025

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.

zabbix

Python Package IndexPython module to work with zabbix.

>= 7.0.0, <= 7.0.7, >= 7.2.0, < 7.2.2, = 7.0.8NVD

zabbix

Crates.iozabbix

>= 7.0.0, <= 7.0.7, >= 7.2.0, < 7.2.2, = 7.0.8NVD

Zabbix

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Package Description

>= 7.0.0, <= 7.0.7, >= 7.2.0, < 7.2.2, = 7.0.8NVD

zabbix

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

>= 7.0.0, <= 7.0.7, >= 7.2.0, < 7.2.2, = 7.0.8NVD

zabbix

RubyGemssend data to zabbix from ruby

>= 7.0.0, <= 7.0.7, >= 7.2.0, < 7.2.2, = 7.0.8NVD

zabbix/zabbix

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

>= 7.0.0, <= 7.0.7, >= 7.2.0, < 7.2.2, = 7.0.8NVD

Security Advisories

CVE-2024-36465

Description

More on this CVE