Description
In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting (XSS).
Unscored
CVE-2022-24566
EUVD-2022-29445GHSA-hvm6-7pfm-582j
In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escap…
Published Feb 23, 2022 · Updated Aug 3, 2024 · Assigned by mitre