First published: Tue Jun 25 2024(Updated: )
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
Credit: security@checkmk.com
Affected Software | Affected Version | How to fix |
---|---|---|
Checkmk Checkmk | <=2.2.0 | |
Checkmk Checkmk | =2.2.0 | |
Checkmk Checkmk | =2.2.0-b1 | |
Checkmk Checkmk | =2.2.0-b2 | |
Checkmk Checkmk | =2.2.0-b3 | |
Checkmk Checkmk | =2.2.0-b4 | |
Checkmk Checkmk | =2.2.0-b5 | |
Checkmk Checkmk | =2.2.0-b6 | |
Checkmk Checkmk | =2.2.0-b7 | |
Checkmk Checkmk | =2.2.0-b8 | |
Checkmk Checkmk | =2.2.0-i1 | |
Checkmk Checkmk | =2.2.0-p1 | |
Checkmk Checkmk | =2.2.0-p10 | |
Checkmk Checkmk | =2.2.0-p11 | |
Checkmk Checkmk | =2.2.0-p12 | |
Checkmk Checkmk | =2.2.0-p13 | |
Checkmk Checkmk | =2.2.0-p14 | |
Checkmk Checkmk | =2.2.0-p15 | |
Checkmk Checkmk | =2.2.0-p16 | |
Checkmk Checkmk | =2.2.0-p17 | |
Checkmk Checkmk | =2.2.0-p18 | |
Checkmk Checkmk | =2.2.0-p19 | |
Checkmk Checkmk | =2.2.0-p2 | |
Checkmk Checkmk | =2.2.0-p20 | |
Checkmk Checkmk | =2.2.0-p21 | |
Checkmk Checkmk | =2.2.0-p22 | |
Checkmk Checkmk | =2.2.0-p23 | |
Checkmk Checkmk | =2.2.0-p24 | |
Checkmk Checkmk | =2.2.0-p25 | |
Checkmk Checkmk | =2.2.0-p26 | |
Checkmk Checkmk | =2.2.0-p27 | |
Checkmk Checkmk | =2.2.0-p3 | |
Checkmk Checkmk | =2.2.0-p4 | |
Checkmk Checkmk | =2.2.0-p5 | |
Checkmk Checkmk | =2.2.0-p6 | |
Checkmk Checkmk | =2.2.0-p7 | |
Checkmk Checkmk | =2.2.0-p8 | |
Checkmk Checkmk | =2.2.0-p9 | |
Checkmk Checkmk | =2.3.0 | |
Checkmk Checkmk | =2.3.0-b1 | |
Checkmk Checkmk | =2.3.0-b2 | |
Checkmk Checkmk | =2.3.0-b3 | |
Checkmk Checkmk | =2.3.0-b4 | |
Checkmk Checkmk | =2.3.0-b5 | |
Checkmk Checkmk | =2.3.0-b6 | |
Checkmk Checkmk | =2.3.0-p1 | |
Checkmk Checkmk | =2.3.0-p2 | |
Checkmk Checkmk | =2.3.0-p3 | |
Checkmk Checkmk | =2.3.0-p4 | |
Checkmk Checkmk | =2.3.0-p5 | |
Checkmk Checkmk | =2.3.0-p6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.