CVE-2024-28832

XSS in Crash Report Page

Summary

Original description

The description as published by the source.

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web checkmk.com

Metadata

CVE: CVE-2024-28832
Published: 2024-06-25
First seen on SecPulse: 2 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-80

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago