CVE-2024-28831
XSS in confirmation pop-up
Résumé
XSS in confirmation pop-up
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
Références
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com