CVE-2020-15803

Katalog CVE

CVSS 6.1 · Medium EPSS 32,3%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada zabbix, fedoraproject fedora +3 lainnya. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.

Rincian

Terbit di NVD

17 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

32,3% peluang dieksploitasi; lebih tinggi dari 98,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.zabbix.com/browse/ZBX-18057 patch · advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/08/msg00007.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/04/msg00018.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZHHIUYIVA5GZ...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TIRIMOXH6GSBA...