An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. The impact depends on environment setup but appears limited at this time.

Updated severity to HIGH and marked the vulnerability as actively exploited with an exploit available.

Added vendor and product information for Zabbix, updated severity to HIGH, and marked the vulnerability as actively exploited with available exploits.

Initial creation