Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4wv7-jg5w-qpfh

Опубликовано: 25 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings.

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings.

EPSS

Процентиль: 70%
0.00645
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79
CWE-80

Связанные уязвимости

CVSS3: 4.8
ubuntu
больше 1 года назад

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings.

CVSS3: 4.8
nvd
больше 1 года назад

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings.

CVSS3: 4.8
debian
больше 1 года назад

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7 ...

EPSS

Процентиль: 70%
0.00645
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79
CWE-80