Описание
A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code not present |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/xenial | not-affected | code not present |
| trusty | ignored | end of standard support |
| upstream | released | 1.6.0p19, 2.0.0i1 |
| xenial | ignored | end of standard support |
Показывать по
Ссылки на источники
EPSS
3.5 Low
CVSS2
5.4 Medium
CVSS3
Связанные уязвимости
A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.
A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x pr ...
A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.
EPSS
3.5 Low
CVSS2
5.4 Medium
CVSS3