Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-agent" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-agent-dbgsym" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-frontend-php" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-java-gateway" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-proxy-mysql" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-proxy-mysql-dbgsym" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-proxy-pgsql" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-proxy-pgsql-dbgsym" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-proxy-sqlite3" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-proxy-sqlite3-dbgsym" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-server-mysql" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-server-mysql-dbgsym" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-server-pgsql" }, { "binary_version": "1:2.2.2+dfsg-1ubuntu1+esm1", "binary_name": "zabbix-server-pgsql-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-agent" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-agent-dbgsym" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-frontend-php" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-java-gateway" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-proxy-mysql" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-proxy-mysql-dbgsym" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-proxy-pgsql" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-proxy-pgsql-dbgsym" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-proxy-sqlite3" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-proxy-sqlite3-dbgsym" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-server-mysql" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-server-mysql-dbgsym" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-server-pgsql" }, { "binary_version": "1:3.0.12+dfsg-1ubuntu0.1~esm1", "binary_name": "zabbix-server-pgsql-dbgsym" } ] }