CVE-2023-29456 MEDIUM

CVE-2023-29456: Inefficient URL schema validation

Vendor Zabbix

Product Zabbix

Weakness CWE-20 · Input validation

Published July 13, 2023

Last update November 3, 2025

View on NVD All CVEs

CVSS base score

5.7/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction Required

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards.

Key dates

02Disclosure timeline

July 13, 2023 CVE published

November 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-29456 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html

Related vulnerabilities

Identifiers

CVE CVE-2023-29456

CWE CWE-20

CVSS 5.7 / MEDIUM

Affected versions

Vendor Zabbix

Product Zabbix

Affected ≥ 4.0.0 and ≤ 4.0.46

Vendor Zabbix

Product Zabbix

Affected ≥ 5.0.0 and ≤ 5.0.35

Vendor Zabbix

Product Zabbix

Affected ≥ 6.0.0 and ≤ 6.0.18

Vendor Zabbix

Product Zabbix

Affected ≥ 6.4.0 and ≤ 6.4.3

Vendor Zabbix

Product Zabbix

Affected ≥ 7.0.0alpha1 and ≤ 7.0.0alpha1

CVE-2023-29456: Inefficient URL schema validation

01Description

02Disclosure timeline

03References

04Related CVE