CVE-2023-29456

Inefficient URL schema validation

State: Published
Severity: 5.7 Medium
Published: Jul 13, 2023
Updated: Nov 3, 2025
Reserved: Apr 6, 2023

Description

URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards.

Scores

CVSS	Score	Vector	Source
3.1	5.7 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L	Zabbix

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
ZabbixZabbix	4.0.0 through 4.0.46Affectedfrom 4.0.47rc1Not affected 5.0.0 through 5.0.35Affectedfrom 5.0.36rc1Not affected 6.0.0 through 6.0.18Affectedfrom 6.0.19rc1Not affected 6.4.0 through 6.4.3Affectedfrom 6.4.4rc1Not affected 7.0.0alpha1 through 7.0.0alpha1Affectedfrom 7.0.0alpha2Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.