Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2024-42327 — CRITICAL severity vulnerability | Release Alert

CVE-2024-42327

9.9

CRITICALCVSS v3

Published

November 27, 2024

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.

Python Package IndexPython module to work with zabbix.

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, >= 7.0.0, < 7.0.1NVD

Crates.iozabbix

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, >= 7.0.0, < 7.0.1NVD

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Package Description

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, >= 7.0.0, < 7.0.1NVD

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, >= 7.0.0, < 7.0.1NVD

RubyGemssend data to zabbix from ruby

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, >= 7.0.0, < 7.0.1NVD

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, >= 7.0.0, < 7.0.1NVD