CVE-2020-28919

Опубликовано: 15 янв. 2022

Источник: debian

Описание

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
check-mk	removed			package

Связанные уязвимости

CVE-2020-28919

CVSS3: 5.4

ubuntu

около 4 лет назад

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.

CVE-2020-28919

CVSS3: 5.4

nvd

около 4 лет назад

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.

GHSA-wvr9-9j3f-xx78

CVSS3: 5.4

github

около 4 лет назад

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.