| Package | Affected versions | Patched versions |
|---|---|---|
| zabbix | ≥ 6.0.0, < 6.0.44≥ 7.0.0, < 7.0.23≥ 7.4.0, < 7.4.7 | 6.0.447.0.237.4.7 |
Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon. An attacker capable of invoking Agent 2 can read arbitrary files from running Docker containers by injecting them via the Docker archive API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free