CVE-2025-27238

3.5

LOWCVSS v3

Published

September 12, 2025

Affected

6 projects

Assigned by

Severity scale

010

Description

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.

Python Package IndexPython module to work with zabbix.

>= 7.0.0, < 7.0.14, >= 7.2.0, < 7.2.8NVD

Crates.iozabbix

>= 7.0.0, < 7.0.14, >= 7.2.0, < 7.2.8NVD

NuGet Gallery

Package Description

>= 7.0.0, < 7.0.14, >= 7.2.0, < 7.2.8NVD

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

>= 7.0.0, < 7.0.14, >= 7.2.0, < 7.2.8NVD

RubyGemssend data to zabbix from ruby

>= 7.0.0, < 7.0.14, >= 7.2.0, < 7.2.8NVD

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

>= 7.0.0, < 7.0.14, >= 7.2.0, < 7.2.8NVD