← Back

CVE-2022-24564

nvd nist
Published: Feb 21, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.

Affected (21)

Products: Checkmk: Checkmk
Checkmk
1 product
Checkmk
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Checkmk
Checkmk
Version 2.0.0
Checkmk
Version 2.0.0 b1
Checkmk
Version 2.0.0 b2
Checkmk
Version 2.0.0 b3
Checkmk
Version 2.0.0 b4
Checkmk
Version 2.0.0 b5
Checkmk
Version 2.0.0 b6
Checkmk
Version 2.0.0 b7
Checkmk
Version 2.0.0 b8
Checkmk
Version 2.0.0 i1
Checkmk
Version 2.0.0 p10
Checkmk
Version 2.0.0 p11
Checkmk
Version 2.0.0 p12
Checkmk
Version 2.0.0 p13
Checkmk
Version 2.0.0 p14
Checkmk
Version 2.0.0 p15
Checkmk
Version 2.0.0 p16
Checkmk
Version 2.0.0 p17
Checkmk
Version 2.0.0 p18
Checkmk
Version 2.0.0 p19
Checkmk
Version 2.0.0 p1

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.