medium6.5
CVE-2025-49643
An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore…
Impact
An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Frontend | from 6.0.0 before 6.0.42 from 7.0.0 before 7.0.19 from 7.2.0 before 7.2.13 from 7.4.0 before 7.4.3 |