CVE-2024-42325 — Excessive information returned by user.get

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

Published: 2025-04-02 · CVSS: 2.1 · CVSS 4.0

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7