未評価
Cross-site scripting in HTML logs of Synthetic Monitoring test services
CVE-2025-64999
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link.
参照URL
- advisory checkmk.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov