medium4.9
CVE-2025-27232
An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.
Impact
An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Frontend | from 7.4.0 before 7.4.3 |