Astra Linux – vulnerability in Zabbix

An authenticated user can create a link containing reflected JavaScript code on its page for a service, and then send it to other users. The payload can only be executed using a known CSRF token value specific to the victim; this value changes periodically and is difficult to predict. The malicio...