CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-40626
Severity
MEDIUM
CVSS
4.8
EPSS
0.69%
Java
Original NVD Description
An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.
Related CVEs
Other vulnerabilities affecting the same vendor(s)