Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11736
HistoryJan 15, 2019 - 9:06 a.m.

Cross-site Scripting (XSS)

2019-01-1509:06:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

EPSS

0.001

Percentile

45.0%

check-mk is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists through multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) render_status_icons function in htmllib.py or (2) ajax_action function in actions.py.

References