CVE-2023-32725 (published 2023-12-18T09:15:23.931Z)
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.
Affected products: Vendor: Zabbix
Product: Zabbix
Versions: 6.0.0 , 6.4.0, 7.0.0alpha1