CVE-2022-24564
Checkmk
Original description
The description as published by the source.
Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.
References
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com