CVE-2024-5741CWE-80

XSS in inventory view

Medium · published June 17, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

Stored XSS in inventory tree rendering in Checkmk before 2.3.0p7, 2.2.0p28, 2.1.0p45 and 2.0.0 (EOL)

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.8th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2024-06-17T11:16Z
EPSS history
Timeline
  • 17 JUN 11:16Z
    XSS in inventory view
    cvelistv5