Description
Zabbix是Zabbix公司的一套开源的监控系统。 Zabbix存在安全漏洞，该漏洞源于Proxy, Server组件存在安全漏洞，允许有权访问单个项目配置的攻击者通过远程代码执行来破整个基础结构。受影响的产品和版本：Zabbix 5.0.0 - 5.0.36版本，5.0.37rc1版本，6.0.0 - 6.0.20版本，6.0.21rc1版本，6.4.0 - 6.4.5版本。
Zabbix 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloud.tencent.com/developer/article/2549688
https://bbs.kanxue.com/thread-278485.htm
https://www.cnblogs.com/cute-puli/p/14651583.html
https://stack.chaitin.com/vuldb/detail/5a51706d-0241-469a-960c-b7d74dc690eb
https://blog.nsfocus.net/zabbix-server-remote-code-execution-vulnerability/
https://github.com/listenquiet/cve-2017-2824-reverse-shell
https://m.freebuf.com/vuls/265423.html
https://developer.aliyun.com/article/205794
https://blog.csdn.net/m0_48520508/article/details/114531033
https://www.secrss.com/articles/26196
https://support.zabbix.com/browse/ZBX-25016
https://nvd.nist.gov/vuln/detail/CVE-2024-22116
https://www.stormshield.com/news/security-alert-zabbix-cve-2024-22116-stormshield-products-response/
https://nordicdefender.com/blog/critical-rce-vulnerability-cve-2024-22116-in-zabbix
https://cert.europa.eu/publications/security-advisories/2024-082/
https://www.sentinelone.com/vulnerability-database/cve-2020-11800/
https://horizon3.ai/attack-research/disclosures/cve-2021-27927-csrf-to-rce-chain-in-zabbix/