CVE-2024-42325

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

• https://support.zabbix.com/browse/ZBX-26258
  Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/04/msg00027.html