CVE-2022-24565

Published: Feb 24, 2022Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications.

Affected (47)

Products: Checkmk: Checkmk

Checkmk

1 product

Checkmk

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Checkmk Checkmk	Version 1.6.0
Checkmk Checkmk	Version 1.6.0 b10
Checkmk Checkmk	Version 1.6.0 b12
Checkmk Checkmk	Version 1.6.0 b1
Checkmk Checkmk	Version 1.6.0 b3
Checkmk Checkmk	Version 1.6.0 b4
Checkmk Checkmk	Version 1.6.0 b5
Checkmk Checkmk	Version 1.6.0 b9
Checkmk Checkmk	Version 1.6.0 p10
Checkmk Checkmk	Version 1.6.0 p11
Checkmk Checkmk	Version 1.6.0 p12
Checkmk Checkmk	Version 1.6.0 p13
Checkmk Checkmk	Version 1.6.0 p14
Checkmk Checkmk	Version 1.6.0 p15
Checkmk Checkmk	Version 1.6.0 p16
Checkmk Checkmk	Version 1.6.0 p19
Checkmk Checkmk	Version 1.6.0 p1
Checkmk Checkmk	Version 1.6.0 p20
Checkmk Checkmk	Version 1.6.0 p21
Checkmk Checkmk	Version 1.6.0 p22
Checkmk Checkmk	Version 1.6.0 p23
Checkmk Checkmk	Version 1.6.0 p24
Checkmk Checkmk	Version 1.6.0 p25
Checkmk Checkmk	Version 1.6.0 p26
Checkmk Checkmk	Version 1.6.0 p27
Checkmk Checkmk	Version 1.6.0 p2
Checkmk Checkmk	Version 2.0.0
Checkmk Checkmk	Version 2.0.0 b1
Checkmk Checkmk	Version 2.0.0 b2
Checkmk Checkmk	Version 2.0.0 b3
Checkmk Checkmk	Version 2.0.0 b4
Checkmk Checkmk	Version 2.0.0 b5
Checkmk Checkmk	Version 2.0.0 b6
Checkmk Checkmk	Version 2.0.0 b7
Checkmk Checkmk	Version 2.0.0 b8
Checkmk Checkmk	Version 2.0.0 i1
Checkmk Checkmk	Version 2.0.0 p10
Checkmk Checkmk	Version 2.0.0 p11
Checkmk Checkmk	Version 2.0.0 p12
Checkmk Checkmk	Version 2.0.0 p13
Checkmk Checkmk	Version 2.0.0 p14
Checkmk Checkmk	Version 2.0.0 p15
Checkmk Checkmk	Version 2.0.0 p16
Checkmk Checkmk	Version 2.0.0 p17
Checkmk Checkmk	Version 2.0.0 p18
Checkmk Checkmk	Version 2.0.0 p19
Checkmk Checkmk	Version 2.0.0 p1

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://checkmk.com/werk/13716

Source: cve@mitre.org

Vendor Advisory

https://checkmk.com/werk/13716

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.