CVE-2024-22117
Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added
When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element.
Reserved 2024-01-05 | Published 2024-11-26 | Updated 2024-11-26 | Assigner ZabbixCWE-20 Improper Input Validation
Zabbix wants to thank prasetia (prasetia) for submitting this report on the HackerOne bug bounty platform
support.zabbix.com/browse/ZBX-25610
Support options
