NetSight
medium4.3

CVE-2024-38857

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attackers to craft malicious links that can fac…

Impact

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attackers to craft malicious links that can facilitate phishing attacks.

Affected products

VendorProductAffected versions
CheckmkCheckmk
through 2.0.0
Versions 2.1.0, 2.2.0, 2.3.0

Weakness classification

References