Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c37f-qch7-r2cg

Опубликовано: 31 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 5.4

Описание

Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers of other users viewing the sidebar.

Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers of other users viewing the sidebar.

EPSS

Процентиль: 8%
0.00027
Низкий

8.5 High

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
4 дня назад

Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers of other users viewing the sidebar.

CVSS3: 5.4
nvd
6 дней назад

Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers of other users viewing the sidebar.

CVSS3: 5.4
debian
6 дней назад

Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) befo ...

EPSS

Процентиль: 8%
0.00027
Низкий

8.5 High

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-79