| Package | Affected versions | Patched versions |
|---|---|---|
| zabbix | = 7.0.8≥ 7.0.0, ≤ 7.0.7≥ 7.2.0, < 7.2.2 | 7.2.2 |
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free