Lucene search
Veracode Vulnerability DatabaseVERACODE:30063HistoryApr 21, 2021 - 5:55 a.m.
Cross-Site Request Forgery (CSRF)
2021-04-2105:55:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
30.9%
zabbix is vulnerable to cross-site request forgery (CSRF). Lack of CSRF protection mechanism in the CControllerAuthenticationUpdate controller allows an attacker to submit requests on behalf of the authenticated Zabbix user.
Related
cvelist
cvelist
CVE-2021-27927
2021-03-03 00:00:00
prion
prion
Cross site request forgery (csrf)
2021-03-03 17:15:00
ubuntucve
ubuntucve
CVE-2021-27927
2021-03-03 00:00:00
alpinelinux
alpinelinux
CVE-2021-27927
2021-03-03 17:15:12
cve
cve
CVE-2021-27927
2021-03-03 17:15:12
osv
osv
CVE-2021-27927
2021-03-03 17:15:12
zabbix - security update
2023-04-12 00:00:00
nvd
nvd
CVE-2021-27927
2021-03-03 17:15:12
debiancve
debiancve
CVE-2021-27927
2021-03-03 17:15:12
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0990-1)
2021-04-19 00:00:00
openSUSE: Security Advisory for zabbix (openSUSE-SU-2022:0036-1)
2022-02-18 00:00:00
Debian: Security Advisory (DLA-3390-1)
2023-04-13 00:00:00
nessus
nessus
SUSE SLES12 Security Update : zabbix (SUSE-SU-2021:0990-1)
2021-03-31 00:00:00
openSUSE 15 Security Update : zabbix (openSUSE-SU-2022:0036-1)
2022-02-17 00:00:00
Debian DLA-3390-1 : zabbix - LTS security update
2023-04-12 00:00:00
suse
suse
Security update for zabbix (moderate)
2022-02-16 00:00:00
Security update for MozillaThunderbird (important)
2022-03-01 00:00:00
debian
debian
[SECURITY] [DLA 3390-1] zabbix security update
2023-04-12 13:36:51
[SECURITY] [DLA 3390-1] zabbix security update
2023-04-12 13:46:20