CVE-2025-27232

MEDIUM

Frontend arbitrary file read in oauth.authorize action

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-27232 has a selected CVSS score of 6.8 (medium).

Description

An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 1, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Zabbix

Browse Zabbix / Zabbix

Default status: unknown

CVE List7.4.0 to ≤ 7.4.2affected

References

2