Boletines de Vulnerabilidades

CVE-2024-36465

   
Software afectado ZABBIX
 
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-36465