VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 19, 2022· Updated Apr 16, 2025

File name information disclosure vulnerability in Zabbix Web Service Report Generation

CVE-2022-46768

Description

Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Zabbix/Zabbixllm-fuzzy
  • Zabbix/Web Service Report Generationv5
    Range: 6.0.0-6.0.11
  • Zabbix/Zabbix agent 2 (MSI packages)v5
    Range: 6.0.12rc1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.