CVE-2024-28832
XSS in Crash Report Page
概要
XSS in Crash Report Page
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com