CVE-2023-32721

CVSS 3.1 Score 7.6 of 10 (high)

Details

Published Oct 12, 2023
Updated: Jan 24, 2024
CWE ID 79
CWE ID 20

Summary

The vulnerability with the CVE ID name CVE-2023-32721 affects the Zabbix web application in the Maps element when a URL field is set with spaces before the URL. It is a stored XSS vulnerability. The affected products include various versions of Zabbix and other related products. To remediate this vulnerability, it is recommended to update to the latest version of Zabbix or apply the available patches. This vulnerability poses a high risk to organizations as it allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized access, data theft, or further exploitation of the affected system. The base severity score is rated as HIGH with an exploitability score of 2.3 and an impact score of 4.7.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-32721 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options