CVE-2022-40626 — Reflected XSS in the backurl parameter of Zabbix Frontend
An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account …
Published: 2022-09-14 · CVSS: 4.8 · CVSS 3.1
An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7