.. / CVE-2022-23134

• Auth Bypass
• Nuclei
• Web

Exploit for Zabbix Setup Configuration Authentication Bypass (CVE-2022-23134)

Description:

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators but also by unauthenticated users. A malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

Nuclei Template

View the template here CVE-2022-23134.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-23134.yaml

References: