cve.bz

CVE-2022-23134

5.3 mediumKEVEPSS 95%

Medium (5.3) in Zabbix Frontend. In CISA KEV since 2022-02-22. EPSS 95% chance of exploitation in the next 30 days.

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
95% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2022-02-22, due 2022-03-08
CWEs
CWE-287, CWE-284
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON