Lucene search

K
cveTribe29CVE-2023-22288
HistoryMar 20, 2023 - 4:15 p.m.

CVE-2023-22288

2023-03-2016:15:13
CWE-138
CWE-79
Tribe29
web.nvd.nist.gov
24
cve-2023-22288
html email injection
tribe29 checkmk
security vulnerability
nvd
cve

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

21.0%

HTML Email Injection in Tribe29 Checkmk <=2.1.0p23; <=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails

Affected configurations

Nvd
Node
checkmkcheckmkMatch2.0.0-
OR
checkmkcheckmkMatch2.0.0b1
OR
checkmkcheckmkMatch2.0.0b2
OR
checkmkcheckmkMatch2.0.0b3
OR
checkmkcheckmkMatch2.0.0b4
OR
checkmkcheckmkMatch2.0.0b5
OR
checkmkcheckmkMatch2.0.0b6
OR
checkmkcheckmkMatch2.0.0b7
OR
checkmkcheckmkMatch2.0.0b8
OR
checkmkcheckmkMatch2.0.0i1
OR
checkmkcheckmkMatch2.0.0p1
OR
checkmkcheckmkMatch2.0.0p10
OR
checkmkcheckmkMatch2.0.0p11
OR
checkmkcheckmkMatch2.0.0p12
OR
checkmkcheckmkMatch2.0.0p13
OR
checkmkcheckmkMatch2.0.0p14
OR
checkmkcheckmkMatch2.0.0p15
OR
checkmkcheckmkMatch2.0.0p16
OR
checkmkcheckmkMatch2.0.0p17
OR
checkmkcheckmkMatch2.0.0p18
OR
checkmkcheckmkMatch2.0.0p19
OR
checkmkcheckmkMatch2.0.0p2
OR
checkmkcheckmkMatch2.0.0p20
OR
checkmkcheckmkMatch2.0.0p21
OR
checkmkcheckmkMatch2.0.0p22
OR
checkmkcheckmkMatch2.0.0p23
OR
checkmkcheckmkMatch2.0.0p24
OR
checkmkcheckmkMatch2.0.0p25
OR
checkmkcheckmkMatch2.0.0p26
OR
checkmkcheckmkMatch2.0.0p27
OR
checkmkcheckmkMatch2.0.0p28
OR
checkmkcheckmkMatch2.0.0p29
OR
checkmkcheckmkMatch2.0.0p3
OR
checkmkcheckmkMatch2.0.0p30
OR
checkmkcheckmkMatch2.0.0p31
OR
checkmkcheckmkMatch2.0.0p32
OR
checkmkcheckmkMatch2.0.0p33
OR
checkmkcheckmkMatch2.0.0p34
OR
checkmkcheckmkMatch2.0.0p4
OR
checkmkcheckmkMatch2.0.0p5
OR
checkmkcheckmkMatch2.0.0p6
OR
checkmkcheckmkMatch2.0.0p7
OR
checkmkcheckmkMatch2.0.0p8
OR
checkmkcheckmkMatch2.0.0p9
OR
checkmkcheckmkMatch2.1.0-
OR
checkmkcheckmkMatch2.1.0b1
OR
checkmkcheckmkMatch2.1.0b2
OR
checkmkcheckmkMatch2.1.0b3
OR
checkmkcheckmkMatch2.1.0b4
OR
checkmkcheckmkMatch2.1.0b5
OR
checkmkcheckmkMatch2.1.0b6
OR
checkmkcheckmkMatch2.1.0b7
OR
checkmkcheckmkMatch2.1.0b8
OR
checkmkcheckmkMatch2.1.0b9
OR
checkmkcheckmkMatch2.1.0p1
OR
checkmkcheckmkMatch2.1.0p10
OR
checkmkcheckmkMatch2.1.0p11
OR
checkmkcheckmkMatch2.1.0p12
OR
checkmkcheckmkMatch2.1.0p13
OR
checkmkcheckmkMatch2.1.0p14
OR
checkmkcheckmkMatch2.1.0p15
OR
checkmkcheckmkMatch2.1.0p16
OR
checkmkcheckmkMatch2.1.0p17
OR
checkmkcheckmkMatch2.1.0p18
OR
checkmkcheckmkMatch2.1.0p2
OR
checkmkcheckmkMatch2.1.0p20
OR
checkmkcheckmkMatch2.1.0p21
OR
checkmkcheckmkMatch2.1.0p22
OR
checkmkcheckmkMatch2.1.0p23
OR
checkmkcheckmkMatch2.1.0p3
OR
checkmkcheckmkMatch2.1.0p4
OR
checkmkcheckmkMatch2.1.0p5
OR
checkmkcheckmkMatch2.1.0p6
OR
checkmkcheckmkMatch2.1.0p7
OR
checkmkcheckmkMatch2.1.0p8
OR
checkmkcheckmkMatch2.1.0p9
OR
tribe29checkmkRange1.6.02.0.0
VendorProductVersionCPE
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*
Rows per page:
1-10 of 771

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Checkmk",
    "vendor": "Tribe29",
    "versions": [
      {
        "lessThanOrEqual": "2.0.0p34",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "2.1.0p23",
        "status": "affected",
        "version": "2.1.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "1.6.0p30",
        "status": "affected",
        "version": "1.6.0",
        "versionType": "semver"
      }
    ]
  }
]

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

21.0%