CVE-2022-24564

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability

published February 21, 2022

CVSS
—
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00671 · 51.4th percentile
Published
2022-02-21T22:14Z
EPSS history
Timeline
  • 21 FEB 22:14Z
    Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability
    cvelistv5