The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator.
Credits
Zabbix wants to thank Shaber Tseng for submitting this report on the HackerOne bug bounty platform.
