Firetruck

CVE-2022-23131

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
FrontendZabbix / Frontend5.4.0 - 5.4.8affected
FrontendZabbix / Frontend>= 5.4.9, < 5.4.9*unaffected