CVE-2023-6156
Livestatus injection in availability timeline
Summary
Livestatus injection in availability timeline
Original description
The description as published by the source.
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
References
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com