CVE-2022-35230 — Reflected XSS in graphs page of Zabbix Frontend
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CS…
Published: 2022-07-06 · CVSS: 3.7 · CVSS 3.1
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7