CVE-2023-6156
Livestatus injection in availability timeline
Résumé
Livestatus injection in availability timeline
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Références
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com