CVE-2020-28919

Publication date

2022-01-15 16:34:59

Family

mitre

State

PUBLISHED

Description

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.