References https://nvd.nist.gov/vuln/detail/CVE-2024-22120 https://support.zabbix.com/browse/ZBX-24505 https://github.com/W01fh4cker/CVE-2024-22120-RCE https://www.cve.org/CVERecord?id=CVE-2024-22120 https://access.redhat.com/security/cve/cve-2024-22120 https://pentest-tools.com/vulnerabilities-exploits/zabbix-server-time-based-blind-sql-injection_23098 https://cloud.tencent.com/developer/article/2419684 https://blog.csdn.net/m0_63050933/article/details/143023162 https://www.sentinelone.com/vulnerability-database/cve-2024-22120/ https://support.zabbix.com/si/jira.issueviews:issue-html/ZBX-24505/ZBX-24505.html
Related VulnerabilitiesZabbix /api_jsonrpc.php SQL 注入漏洞(CVE-2024-36465)PoCCVE-2024-22120: Zabbix Server - Time-Based Blind SQL injectionPoCCVE-2016-10134: Zabbix - SQL InjectionPoCCVE-2019-17382: Zabbix <=4.4 - Authentication BypassPoCCVE-2022-23131: Zabbix - SAML SSO Authentication BypassPoCCVE-2022-23134: Zabbix Setup Configuration Authentication BypassPoCCVE-2022-26148: Grafana & Zabbix Integration - Credentials DisclosurePoCCVE-2016-10134: Zabbix SQL Injection VulnerabilityPoCzabbix-default-password: Zabbix Default Password