The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.0.40"
},
{
"introduced": "6.4.0"
},
{
"fixed": "6.4.9"
}
],
"vendor_product": "zabbix:zabbix",
"source": "CPE_RANGE"
}
]
}{
"cpe": [
"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*",
"cpe:2.3:a:zabbix:zabbix:7.0.0:alpha1:*:*:*:*:*:*",
"cpe:2.3:a:zabbix:zabbix:7.0.0:alpha2:*:*:*:*:*:*",
"cpe:2.3:a:zabbix:zabbix:7.0.0:alpha3:*:*:*:*:*:*",
"cpe:2.3:a:zabbix:zabbix:7.0.0:alpha4:*:*:*:*:*:*",
"cpe:2.3:a:zabbix:zabbix:7.0.0:alpha5:*:*:*:*:*:*",
"cpe:2.3:a:zabbix:zabbix:7.0.0:alpha6:*:*:*:*:*:*",
"cpe:2.3:a:zabbix:zabbix:7.0.0:alpha7:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "6.0.0"
},
{
"fixed": "6.0.24"
},
{
"introduced": "7.0.0-alpha1"
},
{
"last_affected": "7.0.0-alpha1"
},
{
"introduced": "7.0.0-alpha2"
},
{
"last_affected": "7.0.0-alpha2"
},
{
"introduced": "7.0.0-alpha3"
},
{
"last_affected": "7.0.0-alpha3"
},
{
"introduced": "7.0.0-alpha4"
},
{
"last_affected": "7.0.0-alpha4"
},
{
"introduced": "7.0.0-alpha5"
},
{
"last_affected": "7.0.0-alpha5"
},
{
"introduced": "7.0.0-alpha6"
},
{
"last_affected": "7.0.0-alpha6"
},
{
"introduced": "7.0.0-alpha7"
},
{
"last_affected": "7.0.0-alpha7"
}
],
"source": [
"CPE_RANGE",
"CPE_STRING"
]
}[
{
"source": "https://github.com/zabbix/zabbix/commit/b2b72d85a4dd9ee723eb347d7341bce2bf16db1c",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"123312005500073488917362929035363246359",
"89567925846621513861697653323720710214",
"189573243860471028592134160320305140095",
"313427363980996118270646894671991352648",
"307095574546783579578986695349133671206",
"75461759454102436436939551771418067042"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2024-22119-8c4c3438",
"target": {
"file": "src/zabbix_java/src/com/zabbix/gateway/GeneralInformation.java"
}
}
]
"2026-07-15T06:21:47Z"
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22119.json"