CVE-2024-6052CWE-80

XSS in SQL check parameters

Medium · published July 3, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

Stored XSS in Checkmk before versions 2.3.0p8, 2.2.0p29, 2.1.0p45, and 2.0.0 (EOL) allows users to execute arbitrary scripts by injecting HTML elements

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.1th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2024-07-03T14:30Z
EPSS history
Timeline
  • 03 JUL 14:30Z
    XSS in SQL check parameters
    cvelistv5