CVE-2024-28831
XSS in confirmation pop-up
概要
XSS in confirmation pop-up
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com