medium5.4
CVE-2024-28831
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML ele…
Impact
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkmk | Checkmk | through 2.2.0 Versions 2.2.0, 2.3.0 |