Security Advisory

CVE-2024-38859

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-26 14:15:32

Last updated 2024-08-26 15:22:30

Assigner Checkmk

State PUBLISHED

Description

XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 (EOL) allowed malicious users to execute arbitrary scripts by injecting HTML elements into the SLA column title. These scripts could be executed when the view page was cloned by other users.

← Browse all CVEs View on cve.org ↗