NetSight
medium6.1

CVE-2024-38858

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.

Impact

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.

Affected products

VendorProductAffected versions
CheckmkCheckmk
before 2.3.0
Version 2.3.0

Weakness classification

References