CVE-2025-27232

Frontend arbitrary file read in oauth.authorize action PUBLISHED

Description (CNA)

An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 7.4.0 through 7.4.2

CWE

CWE-918

References

https://support.zabbix.com/browse/ZBX-27282

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.