CVE-2022-23134

Fixed in a distro release ExploitedEPSS 95%CVSS 3.7

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

Published 2022-01-13 · In CISA KEV since 2022-02-22 · CVE record · OSV