CVE-2023-32727 (published 2023-12-18T09:18:48.446Z)
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
Affected products: Vendor: Zabbix
Product: Zabbix
Versions: 4.0.0, 5.0.0 , 6.0.0, 6.4.0, 7.0.0alpha1