Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-27232

Frontend arbitrary file read in oauth.authorize action

Description

An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unknown

  • 7.4.0 to ≤ 7.4.2affected

References