cbcvebase.
CVE-2023-29456
published 2023-07-13

CVE-2023-29456: URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL…

PriorityP425medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.56%
43.0th percentile
URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards.

Affected

13 ranges
VendorProductVersion rangeFixed in
debianzabbix< zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye)zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye)
zabbixfrontend4.0.0 – 4.0.46—
zabbixfrontend5.0.0 – 5.0.35—
zabbixfrontend6.0.0 – 6.0.18—
zabbixfrontend6.4.0 – 6.4.3—
zabbixzabbix>= 0 < 1:5.0.44+dfsg-1+deb11u11:5.0.44+dfsg-1+deb11u1
zabbixzabbix>= 0 < 1:6.0.23+dfsg-11:6.0.23+dfsg-1
zabbixzabbix>= 0 < 1:6.0.23+dfsg-11:6.0.23+dfsg-1
zabbixzabbix4.0.0 – 4.0.46—
zabbixzabbix5.0.0 – 5.0.35—
zabbixzabbix6.0.0 – 6.0.18—
zabbixzabbix6.4.0 – 6.4.3—
zabbixzabbix7.0.0alpha1 – 7.0.0alpha1—

CVSS provenance

nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
osv5.4MEDIUM
vendor_debian5.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.