CVEs-PoC/2022/CVE-2022-23134.md

CVE-2022-23134

Description

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Awrrays/FrameVul
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/TheN00bBuilder/cve-2022-23134-poc-and-writeup
• https://github.com/cc8700619/poc
• https://github.com/plzheheplztrying/cve_monitor
• https://github.com/superlink996/chunqiuyunjingbachang
• https://github.com/xinyisleep/pocscan