CVEvulnerability

CVE-2024-22117

2.2 LOW Published 2024-11-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.2 LOW — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
2.2 LOW — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-20

Description

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element.

Affected configurations

• zabbix zabbix (>= 5.0.0 < 5.0.44) • zabbix zabbix (>= 6.0.0 < 6.0.34) • zabbix zabbix (>= 6.4.0 < 6.4.19) • zabbix zabbix (>= 7.0.0 < 7.0.4)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References