Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/137089?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "type": "deb", "namespace": "debian", "name": "zabbix", "version": "1:6.0.23+dfsg-1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "0", "latest_non_vulnerable_version": "1:7.0.22+dfsg-1.1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107101?format=api", "vulnerability_id": "VCID-2jas-5kc1-puat", "summary": "The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053877", "reference_id": "1053877", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053877" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-32722" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2jas-5kc1-puat" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107097?format=api", "vulnerability_id": "VCID-3azv-fsyx-n3fz", "summary": "Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29458" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3azv-fsyx-n3fz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107098?format=api", "vulnerability_id": "VCID-5t3t-6uqs-akbk", "summary": "A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053877", "reference_id": "1053877", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053877" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-32721" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5t3t-6uqs-akbk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107090?format=api", "vulnerability_id": "VCID-7ajm-my3d-7fgy", "summary": "Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137023?format=api", "purl": "pkg:deb/debian/zabbix@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29451" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7ajm-my3d-7fgy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107103?format=api", "vulnerability_id": "VCID-8eb9-mxpg-5kf2", "summary": "Memory pointer is in a property of the Ducktape object. This leads to multiple vulnerabilities related to direct memory access and manipulation.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053877", "reference_id": "1053877", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053877" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-32724" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8eb9-mxpg-5kf2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107092?format=api", "vulnerability_id": "VCID-8zqh-3xt2-nbdq", "summary": "Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g., \"var a = {{.}}\"), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template. Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution.", "references": [], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29453" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8zqh-3xt2-nbdq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107107?format=api", "vulnerability_id": "VCID-buz8-zycr-tbh2", "summary": "An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.", "references": [], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-32727" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-buz8-zycr-tbh2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107094?format=api", "vulnerability_id": "VCID-fefk-6mjh-67fm", "summary": "Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script is activated through a link, which sends a request to a website with a vulnerability that enables execution of malicious scripts.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29455" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fefk-6mjh-67fm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107096?format=api", "vulnerability_id": "VCID-h5fw-ktc6-rqd3", "summary": "Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can be sent as request to a website with a vulnerability that enables execution of malicious scripts.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29457" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h5fw-ktc6-rqd3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107091?format=api", "vulnerability_id": "VCID-jy3a-zvh4-b3ag", "summary": "Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attribution text” when selected “Other” Tile provider.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137023?format=api", "purl": "pkg:deb/debian/zabbix@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29452" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jy3a-zvh4-b3ag" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107104?format=api", "vulnerability_id": "VCID-m5us-tmqh-wkbm", "summary": "The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.", "references": [], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137023?format=api", "purl": "pkg:deb/debian/zabbix@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-32725" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m5us-tmqh-wkbm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107095?format=api", "vulnerability_id": "VCID-mpy5-d7qa-u7fz", "summary": "URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29456" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mpy5-d7qa-u7fz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107089?format=api", "vulnerability_id": "VCID-sc8u-4w9c-23ev", "summary": "JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user \"zabbix\") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29450" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sc8u-4w9c-23ev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107087?format=api", "vulnerability_id": "VCID-u4hp-dwsj-53b9", "summary": "JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles (Admin and Superadmin). Administrative privileges should be typically granted to users who need to perform tasks that require more control over the system. The security risk is limited because not all users have this level of access.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29449" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u4hp-dwsj-53b9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107093?format=api", "vulnerability_id": "VCID-xwr8-85au-ukd7", "summary": "Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload (e.g., in a database or server-side text files), and finally, the application unintentionally executes the payload for every victim visiting its web pages.", "references": [ { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175", "reference_id": "1055175", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/137017?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.8%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18kh-njx3-p7aw" }, { "vulnerability": "VCID-53f2-uzt4-pqgs" }, { "vulnerability": "VCID-8zqh-3xt2-nbdq" }, { "vulnerability": "VCID-bff2-nhum-ckhj" }, { "vulnerability": "VCID-dr1v-72p6-2yhn" }, { "vulnerability": "VCID-frdw-trch-uufq" }, { "vulnerability": "VCID-gapt-kwkw-kkek" }, { "vulnerability": "VCID-gj5s-dde8-1ubx" }, { "vulnerability": "VCID-nv7m-hsr3-17gk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.8%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137072?format=api", "purl": "pkg:deb/debian/zabbix@1:5.0.44%2Bdfsg-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:5.0.44%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137089?format=api", "purl": "pkg:deb/debian/zabbix@1:6.0.23%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137019?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/137018?format=api", "purl": "pkg:deb/debian/zabbix@1:7.0.22%2Bdfsg-1.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:7.0.22%252Bdfsg-1.1%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-29454" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xwr8-85au-ukd7" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/zabbix@1:6.0.23%252Bdfsg-1%3Fdistro=trixie" }