Zabbix Server Secondary-Order SQL Injection Vulnerability in Autoregistration Process

A secondary-order SQL injection vulnerability has been identified in Zabbix Server versions 6.0.0 through 6.0.33, 6.4.0 through 6.4.18, and 7.0.0 through 7.0.3. This vulnerability allows a Zabbix administrator to inject arbitrary SQL during the automatic removal of hosts by inserting malicious SQL into the 'Visible name' field. The exploitation requires the administrator to have access to a host that will be auto-removed.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries and potentially access or modify database information.

Remediation

Users can update to Zabbix Server version 6.0.34, 6.4.19, or 7.0.4 to address this vulnerability. As a temporary measure, any Autoregistration actions that remove hosts can be disabled.