CVE-2023-32725 — Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the fr…
Published: 2023-12-18 · CVSS: 9.6 · CVSS 3.1
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7