CVE-2024-42330

Name of the Vulnerable Software and Affected Versions: Zabbix (affected versions not specified)

Description: The issue is related to the use of uncontrolled format strings when processing HttpRequest objects, which can allow a remote attacker to gain unauthorized access to protected information. The problem lies in the fact that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript, allowing the creation of internal strings that can be used to access hidden properties of objects.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.