CVE-2025-49641

4.3

MEDIUMCVSS v3

Published

October 3, 2025

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A regular Zabbix user with no permission to the Monitoring -> Problems view is still able to call the problem.view.refresh action and therefore still retrieve a list of active problems.

zabbix

Python Package IndexPython module to work with zabbix.

>= 6.0.0, < 6.0.41, >= 7.0.0, < 7.0.18, >= 7.2.0, < 7.2.12, >= 7.4.0, < 7.4.2NVD

zabbix

Crates.iozabbix

>= 6.0.0, < 6.0.41, >= 7.0.0, < 7.0.18, >= 7.2.0, < 7.2.12, >= 7.4.0, < 7.4.2NVD

Zabbix

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Package Description

>= 6.0.0, < 6.0.41, >= 7.0.0, < 7.0.18, >= 7.2.0, < 7.2.12, >= 7.4.0, < 7.4.2NVD

zabbix

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

>= 6.0.0, < 6.0.41, >= 7.0.0, < 7.0.18, >= 7.2.0, < 7.2.12, >= 7.4.0, < 7.4.2NVD

zabbix

RubyGemssend data to zabbix from ruby

>= 6.0.0, < 6.0.41, >= 7.0.0, < 7.0.18, >= 7.2.0, < 7.2.12, >= 7.4.0, < 7.4.2NVD

zabbix/zabbix

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

>= 6.0.0, < 6.0.41, >= 7.0.0, < 7.0.18, >= 7.2.0, < 7.2.12, >= 7.4.0, < 7.4.2NVD

Security Advisories

CVE-2025-49641

Description

More on this CVE