CVE-2024-38859
XSS in view page with SLA column
概要
XSS in view page with SLA column
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 (EOL) allowed malicious users to execute arbitrary scripts by injecting HTML elements into the SLA column title. These scripts could be executed when the view page was cloned by other users.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com