[Git][security-tracker-team/security-tracker][master] CVE-2024-22120/zabbix identfied vulnerable introducing commit

[Tobias Frost (@tobi)]

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a0bed110 by Tobias Frost at 2024-09-29T19:03:05+02:00
CVE-2024-22120/zabbix identfied vulnerable introducing commit

https://github.com/zabbix/zabbix/commit/6c276d866d3f96689609d70c5893cfff8cac7cd6#diff-331b9d6f8b824f829261ac92f1600dbe2001c72e12f7f4116042d88b7398dea6R91

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35212,6 +35212,7 @@ CVE-2024-22120 (Zabbix server can perform command execution for configured scrip
 	NOTE: https://support.zabbix.com/browse/ZBX-24505
 	NOTE: fixed by https://github.com/zabbix/zabbix/commit/9013ff74985e40aee6b58e2ed67675b87cab0879 (7.0.0beta2)
 	NOTE: fixed by https://github.com/zabbix/zabbix/commit/c8ac414ff44127c3e8781eb029f519c060f623fa (6.0.28rc1)
+	NOTE: introduced by https://github.com/zabbix/zabbix/commit/6c276d866d3f96689609d70c5893cfff8cac7cd6 (first seen in 6.0.0alpha1)
 CVE-2024-21746 (Authentication Bypass by Spoofing vulnerability in Wpmet Wp Ultimate R ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-5597 (A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboar ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a0bed1109d769356b3f7639a2b668d4e4023dcfa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a0bed1109d769356b3f7639a2b668d4e4023dcfa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240929/f023f868/attachment.htm>