ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-46768

—
CVSS 3.1
5.9 medium
EPSS
48%p99
Published
()
Modified
Description

Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

Vendors
zabbix
Products
web service report generation, zabbix-agent2
Weakness
CWE-20
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (47.8%)

In the news

No ingested article mentions this CVE yet.