CVE-2022-24564: XSS
Published Feb 21, 2022
·Updated
Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.
Affected Software
42 affected components
CheckMK Checkmk=2.0.0
CheckMK Checkmk=2.0.0-b1
CheckMK Checkmk=2.0.0-b2
CheckMK Checkmk=2.0.0-b3
CheckMK Checkmk=2.0.0-b4
CheckMK Checkmk=2.0.0-b5
CheckMK Checkmk=2.0.0-b6
CheckMK Checkmk=2.0.0-b7
CheckMK Checkmk=2.0.0-b8
CheckMK Checkmk=2.0.0-i1
CheckMK Checkmk=2.0.0-p1
CheckMK Checkmk=2.0.0-p10
CheckMK Checkmk=2.0.0-p11
CheckMK Checkmk=2.0.0-p12
CheckMK Checkmk=2.0.0-p13
CheckMK Checkmk=2.0.0-p14
CheckMK Checkmk=2.0.0-p15
CheckMK Checkmk=2.0.0-p16
CheckMK Checkmk=2.0.0-p17
CheckMK Checkmk=2.0.0-p18
CheckMK Checkmk=2.0.0-p19
Tribe29 Checkmk=2.0.0
Tribe29 Checkmk=2.0.0-b1
Tribe29 Checkmk=2.0.0-b2
Tribe29 Checkmk=2.0.0-b3
Tribe29 Checkmk=2.0.0-b4
Tribe29 Checkmk=2.0.0-b5
Tribe29 Checkmk=2.0.0-b6
Tribe29 Checkmk=2.0.0-b7
Tribe29 Checkmk=2.0.0-b8
Tribe29 Checkmk=2.0.0-i1
Tribe29 Checkmk=2.0.0-p1
Tribe29 Checkmk=2.0.0-p10
Tribe29 Checkmk=2.0.0-p11
Tribe29 Checkmk=2.0.0-p12
Tribe29 Checkmk=2.0.0-p13
Tribe29 Checkmk=2.0.0-p14
Tribe29 Checkmk=2.0.0-p15
Tribe29 Checkmk=2.0.0-p16
Tribe29 Checkmk=2.0.0-p17
Tribe29 Checkmk=2.0.0-p18
Tribe29 Checkmk=2.0.0-p19
Remediation
Patch Available
Event History
Feb 21, 2022
CVE Published
via MITRE·10:14 PM
Data Sourced
via MITRE·10:14 PM
Description
Frequently Asked Questions
1
What is CVE-2022-24564?
CVE-2022-24564 is a Cross Site Scripting (XSS) vulnerability in Checkmk <=2.0.0p19.
2
How does CVE-2022-24564 affect Checkmk?
CVE-2022-24564 allows HTML injection in the Help Text field while creating or editing a user attribute in Checkmk <=2.0.0p19, leading to potential Cross Site Scripting (XSS) attacks.
3
What is the severity of CVE-2022-24564?
CVE-2022-24564 has a severity rating of 6.1 (Medium).
4
How can I fix CVE-2022-24564?
To fix CVE-2022-24564, you should update Checkmk to a version higher than 2.0.0p19.
5
Where can I find more information about CVE-2022-24564?
You can find more information about CVE-2022-24564 at the following link: [CVE-2022-24564](https://checkmk.com/werk/13199)