CVE-2023-29452: Zabbix

Medium severity, CVSS 5.4. EPSS: 64.1% chance of exploitation in the next 30 days.

Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attribution text” when selected “Other” Tile provider.

Affected products

• Zabbix Zabbix: from 6.0.0, up to and including 6.0.17; version 6.4.0 only; version 6.4.1 only

Published 2023-07-13. Last modified 2026-06-17.