CVE-2022-40626 Information

Description

An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login password and role in Zabbix Frontend.

Reference

https://support.zabbix.com/browse/ZBX-21350 An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login password and role in Zabbix Frontend.