CVE-2025-27236 — User information disclosure via api_jsonrpc.php on method user.get with param search
A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values…
Published: 2025-10-03 · CVSS: 2.1 · CVSS 4.0
A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7