Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-38859


XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 (EOL) allowed malicious users to execute arbitrary scripts by injecting HTML elements into the SLA column title. These scripts could be executed when the view page was cloned by other users.


Published

2024-08-26T15:15:08.183

Last Modified

2024-12-03T17:47:02.467

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-80
  • Type: Primary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application checkmk checkmk 2.0.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes

References