CVE-2025-49643 — Frontend DoS vulnerability due to asymmetric resource consumption

CVE-2025-49643

Frontend DoS vulnerability due to asymmetric resource consumption PUBLISHED

Description (CNA)

An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 6.0.0 through 6.0.41; affected 7.0.0 through 7.0.18; affected 7.2.0 through 7.2.12; affected 7.4.0 through 7.4.2

CWE

CWE-405

References

https://support.zabbix.com/browse/ZBX-27284

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.