CVE-2022-35229 — Reflected XSS in discovery page of Zabbix Frontend
An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known…
Published: 2022-07-06 · CVSS: 3.7 · CVSS 3.1
An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7