CVE-2025-27232 — Frontend arbitrary file read in oauth.authorize action
An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.
Published: 2025-12-01 · CVSS: 6.8 · CVSS 4.0
An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7