Astra Linux – vulnerability in Zabbix

An authenticated user can create a link containing reflected JavaScript code for an item’s page and send it to other users. The payload can only be executed using a known CSRF token value specific to the victim; this value changes periodically and is difficult to predict. The malicious code has...