CVE-2024-42325

2.1 lowEPSS 0.3%

Low (2.1) in zabbix zabbix. EPSS 0.3% chance of exploitation in the next 30 days.

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

3.5 low

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-359
Published: 2025-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zabbix:zabbix

References

https://support.zabbix.com/browse/ZBX-26258
https://lists.debian.org/debian-lts-announce/2025/04/msg00027.html

Check your stack JSON