CVE-2024-22117: 
Zabbix Server vulnerability analysis and mitigation

CVE-2024-22117 is a vulnerability in Zabbix affecting versions 5.0.x before 5.0.43rc1, 6.0.x before 6.0.35rc1, 6.4.x before 6.4.20rc1, and 7.0.x before 7.0.4rc1. The vulnerability relates to the map element URL feature where sequential IDs are used to record URLs in the database (Zabbix Support).

When adding a URL to a map element, the system uses sequential IDs stored in the sysmapelementurlid value. The vulnerability occurs during the process of adding new URLs, where the system retrieves the last sysmapelementurlid value and increments it by one. The issue has been assigned a CVSS v3.1 Base Score of 2.2 (LOW) with the vector string CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L (NVD).

The vulnerability can prevent users from adding URLs to map elements, effectively causing a denial of service for this specific functionality. When exploited, it disrupts the normal operation of the map element URL feature (Zabbix Support).

The vulnerability has been fixed in Zabbix versions 5.0.44rc1, 6.0.34rc1, 6.4.19rc1, and 7.0.4rc1. Users are advised to upgrade to these or later versions to address the security issue (Zabbix Support).