CVE-2024-22119

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-22119
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22119.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-22119
Downstream
Related
Published
2024-02-09T09:15:08Z
Modified
2026-07-15T06:21:47Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "5.0.0"
                },
                {
                    "fixed": "5.0.40"
                },
                {
                    "introduced": "6.4.0"
                },
                {
                    "fixed": "6.4.9"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "zabbix:zabbix"
        }
    ]
}
References

Affected packages

Git / github.com/zabbix/zabbix

Affected ranges

Type
GIT
Repo
https://github.com/zabbix/zabbix
Events
Introduced
5203d2ea7d901cd33d148f20586e2155901a7faa
Fixed
b2b72d85a4dd9ee723eb347d7341bce2bf16db1c
Introduced
aef542ad8aef472874199012f9b2350db16dc7ee
Last Affected
721b0012b82edad4dd6617b0e2aa934611cc8cec
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha2:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha3:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha4:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha5:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha6:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha7:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.0.24"
        },
        {
            "introduced": "7.0.0-alpha1"
        },
        {
            "last_affected": "7.0.0-alpha1"
        },
        {
            "introduced": "7.0.0-alpha2"
        },
        {
            "last_affected": "7.0.0-alpha2"
        },
        {
            "introduced": "7.0.0-alpha3"
        },
        {
            "last_affected": "7.0.0-alpha3"
        },
        {
            "introduced": "7.0.0-alpha4"
        },
        {
            "last_affected": "7.0.0-alpha4"
        },
        {
            "introduced": "7.0.0-alpha5"
        },
        {
            "last_affected": "7.0.0-alpha5"
        },
        {
            "introduced": "7.0.0-alpha6"
        },
        {
            "last_affected": "7.0.0-alpha6"
        },
        {
            "introduced": "7.0.0-alpha7"
        },
        {
            "last_affected": "7.0.0-alpha7"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

6.*
6.0.0
6.0.1
6.0.10
6.0.10rc1
6.0.10rc2
6.0.11
6.0.11rc1
6.0.11rc2
6.0.12
6.0.12rc1
6.0.12rc2
6.0.13
6.0.13rc1
6.0.14
6.0.14rc1
6.0.14rc2
6.0.15
6.0.15rc1
6.0.15rc2
6.0.16
6.0.16rc1
6.0.17
6.0.17rc1
6.0.17rc2
6.0.18
6.0.18rc1
6.0.19
6.0.19rc1
6.0.1rc1
6.0.1rc2
6.0.1rc3
6.0.1rc4
6.0.2
6.0.20
6.0.20rc1
6.0.21
6.0.21rc1
6.0.22
6.0.22rc1
6.0.23
6.0.23rc1
6.0.2rc1
6.0.3
6.0.3rc1
6.0.4
6.0.4rc1
6.0.5
6.0.5rc1
6.0.6
6.0.6rc1
6.0.7
6.0.7rc1
6.0.8
6.0.8rc1
6.0.8rc2
6.0.9
6.0.9rc1
6.0.9rc2
7.*
7.0.0-alpha1
7.0.0-alpha2
7.0.0-alpha3
7.0.0-alpha4
7.0.0-alpha5
7.0.0-alpha6
7.0.0-alpha7
7.0.0alpha1
7.0.0alpha2
7.0.0alpha3
7.0.0alpha4
7.0.0alpha6
7.0.0alpha7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22119.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "123312005500073488917362929035363246359",
                "89567925846621513861697653323720710214",
                "189573243860471028592134160320305140095",
                "313427363980996118270646894671991352648",
                "307095574546783579578986695349133671206",
                "75461759454102436436939551771418067042"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-22119-8c4c3438",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/zabbix/zabbix/commit/b2b72d85a4dd9ee723eb347d7341bce2bf16db1c",
        "target": {
            "file": "src/zabbix_java/src/com/zabbix/gateway/GeneralInformation.java"
        }
    }
]
vanir_signatures_modified 
"2026-07-15T06:21:47Z"