The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section.
{
"versions": [
{
"introduced": "6.0.0"
},
{
"fixed": "6.0.24"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0-alpha1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0-alpha2"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0-alpha3"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0-alpha4"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0-alpha5"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0-alpha6"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.0-alpha7"
}
]
}[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"123312005500073488917362929035363246359",
"89567925846621513861697653323720710214",
"189573243860471028592134160320305140095",
"313427363980996118270646894671991352648",
"307095574546783579578986695349133671206",
"75461759454102436436939551771418067042"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-22119-8c4c3438",
"target": {
"file": "src/zabbix_java/src/com/zabbix/gateway/GeneralInformation.java"
},
"source": "https://github.com/zabbix/zabbix/commit/b2b72d85a4dd9ee723eb347d7341bce2bf16db1c"
}
]
[
{
"events": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.0.40"
}
]
},
{
"events": [
{
"introduced": "6.4.0"
},
{
"fixed": "6.4.9"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22119.json"