cve.bz

CVE-2023-29449

4.9 mediumEPSS 1.2%

Medium (4.9) in zabbix zabbix. EPSS 1.2% chance of exploitation in the next 30 days.

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles (Admin and Superadmin). Administrative privileges should be typically granted to users who need to perform tasks that require more control over the system. The security risk is limited because not all users have this level of access.

Severity

CVSS 3.1

4.9 medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS
1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWEs
CWE-770, CWE-400
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON