tocsin

Alpine/zabbix: medium 4.9

An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

Action: Upgrade zabbix to 7.4.3-r0 or later.

Affected

introducedfixedlast affected
07.4.3-r0-

Fixed versions

7.4.3-r0

Sources

published · modified · JSON