CVE-2024-36465

Published: 2025-04-02T06:15Z

Last Modified: 2025-04-02T14:58Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt