Lucene search
HistorySep 02, 2024 - 12:15 p.m.
CVE-2024-38858
checkmk
input neutralization
injection
malicious scripts
robotmk logs view
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.
Affected configurations
Node
checkmkcheckmkRange<2.3.0
ORcheckmkcheckmkMatch2.3.0-
ORcheckmkcheckmkMatch2.3.0p1
ORcheckmkcheckmkMatch2.3.0p10
ORcheckmkcheckmkMatch2.3.0p11
ORcheckmkcheckmkMatch2.3.0p12
ORcheckmkcheckmkMatch2.3.0p13
ORcheckmkcheckmkMatch2.3.0p2
ORcheckmkcheckmkMatch2.3.0p3
ORcheckmkcheckmkMatch2.3.0p4
ORcheckmkcheckmkMatch2.3.0p5
ORcheckmkcheckmkMatch2.3.0p6
ORcheckmkcheckmkMatch2.3.0p7
ORcheckmkcheckmkMatch2.3.0p8
ORcheckmkcheckmkMatch2.3.0p9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkmk | checkmk | * | cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:* |
| checkmk | checkmk | 2.3.0 | cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:* |
References
Related
vulnrichment
vulnrichment
CVE-2024-38858 Cross-site scripting in Robotmk logs view
2024-09-02 09:16:40
cvelist
cvelist
CVE-2024-38858 Cross-site scripting in Robotmk logs view
2024-09-02 09:16:40
cve
cve
CVE-2024-38858
2024-09-02 12:15:19
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-38858