Grafana Zabbix Plugin Regular Expression Denial-of-Service Vulnerability

A regular expression denial-of-service (ReDoS) vulnerability has been identified in the Grafana Zabbix plugin, specifically in versions 5.2.1 and earlier. This vulnerability arises from user-supplied regular expression queries that can cause excessive CPU usage, potentially leading to performance degradation. The issue has been addressed in version 6.0.0 of the plugin.

Impact

Exploitation of this vulnerability can cause a significant increase in CPU usage, leading to performance issues on the affected system.

Remediation

Users can upgrade to Grafana Zabbix Plugin version 6.0.0 or later to address this vulnerability.