low3.5
CVE-2025-27238
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Impact
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | from 7.0.0 before 7.0.14 from 7.2.0 before 7.2.8 |