CVE catalog
CVE-2022-23133
zabbix: CVE-2022-23133
- Severity
- Medium · CVSS 6.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.03% · Oct 25, 2026
An authenticated user can create a hosts group from the configuration with XSS payload, which will be available for other users. When XSS is stored by an authenticated malicious actor and other users try to search for groups during new host creation, the XSS payload will fire and the actor can steal session cookies and perform session hijacking to impersonate users or take over their accounts.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | zabbix | sid | 1:7.0.29+dfsg-2 | fixed |
| Debian | zabbix | forky | 1:7.0.29+dfsg-2 | fixed |
| Debian | zabbix | trixie | 1:7.0.22+dfsg-1~deb13u1 | fixed |
| Debian | zabbix | bookworm | 1:6.0.14+dfsg-1 | fixed |
| Ubuntu | zabbix | pro | 1:5.0.8+dfsg-1build1 | vulnerable |
| Ubuntu | zabbix | pro | 1:5.0.14+dfsg-1 | vulnerable |
| Ubuntu | zabbix | pro | 1:5.0.17+dfsg-1 | vulnerable |
| Ubuntu | zabbix | pro | 1:5.0.17+dfsg-1ubuntu0.1~esm1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | zabbix | source | sid | 1:6.0.7+dfsg-2 | not yet assigned | Not reported | Not reported |
| Debian | zabbix | source | forky | 1:6.0.7+dfsg-2 | not yet assigned | Not reported | Not reported |
| Debian | zabbix | source | trixie | 1:6.0.7+dfsg-2 | not yet assigned | Not reported | Not reported |
| Debian | zabbix | source | bookworm | 1:6.0.7+dfsg-2 | not yet assigned | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [zabbix-agent]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-agent2]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-frontend-php]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-java-gateway]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-proxy-mysql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-proxy-pgsql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-proxy-sqlite3]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-sender]Fixed
Source package: [zabbix]
Details (2)
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-server-mysql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-server-pgsql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
- [zabbix-web-service]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.7+dfsg-2dsa · zabbix · debian · bookworm
Observed:
References
- [https://osv.dev/vulnerability/UBUNTU-CVE-2022-23133]
- [https://security-tracker.debian.org/tracker/CVE-2022-23133]
- [https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23133.json]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]