CVE-2023-32727 – Code execution vulnerability in icmpping

https://notcve.org/view.php?id=CVE-2023-32727

18 Dec 2023 — An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server. Un atacante que tiene el privilegio de configurar elementos de Zabbix puede usar la función icmpping() con un comando malicioso adicional dentro para ejecutar código arbitrario en el servidor Zabbix actual. An update that fixes one vulnerability is now available. This update for zabbix fixes the following issues. Updated t... • https://support.zabbix.com/browse/ZBX-23857 • CWE-20: Improper Input Validation •