CVE-2022-24566

In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as…

published February 23, 2022

CVSS
—
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting (XSS).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00572 · 46.6th percentile
Published
2022-02-23T10:52Z
EPSS history
Timeline
  • 23 FEB 10:52Z
    In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as…
    cvelistv5