Checkmk 跨站脚本漏洞

Checkmk is an editor. A cross-site scripting vulnerability exists in Checkmk, which stems from Checkmk version = 2.0.0p19. When creating or editing user properties, Help Text is affected by HTML injection, which can be triggered when editing a user. An attacker could use this vulnerability to...

PT-2022-16720 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.0.0p19 and earlier Description: The issue concerns a Cross Site Scripting XSS vulnerability. It occurs when creating or editing a user attribute, where the Help Text is subject to HTML injection. This can be triggered when...

Checkmk Cross-Site Scripting Vulnerability (CNVD-2022-21235)

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by remote, authenticated attackers to inject arbitrary JavaScript into view headers via the javascript: URL...

CVE-2020-28919

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

CVE-2020-28919

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

CVE-2020-28919

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

Cross site scripting

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

CVE-2020-28919

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

CVE-2020-28919

CVE-2020-28919 affects Checkmk 1.6.0x prior to 1.6.0p19, where an authenticated remote attacker can inject arbitrary JavaScript via a javascript: URL in a view title (stored XSS). Multiple sources corroborate the issue, including Red Hat and PT Security advisories, with remediation guidance to up...

PT-2022-8911 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6.0x prior to 1.6.0p19 Description: A stored cross site scripting XSS issue allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title. Recommendations: For Checkmk versions...

Checkmk跨站脚本漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by remote, authenticated attackers to inject arbitrary JavaScript into view headers via the javascript: URL...

PT-2022-11334 · Unknown +1 · Checkmk Raw Edition +1

Name of the Vulnerable Software and Affected Versions: CheckMK Raw Edition software versions 1.5.0 through 1.6.0 Description: The issue allows for Reflected XSS, enabling an attacker to inject malicious HTML content, including JavaScript or other client-side scripts, into a user's browser. This...

Exploit for Incorrect Default Permissions in Checkmk

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded applicati...

Exploit for Unrestricted Upload of File with Dangerous Type in Checkmk

CVE-2021-40905 - RCE via a crafted .mkp file Application:...

Exploit for Cross-site Scripting in Checkmk

CVE-2021-40906 - Reflected XSS in an unauthenticated zone A...

CheckMK management web console cross-site scripting vulnerability

CheckMK management web console is an application. Based on Asciidoctor and automatically available on HTML docs.checkmk.com. CheckMK management web console suffers from a cross-site scripting vulnerability that could be exploited by attackers to open a backdoor on the device using HTML content...

Exploit for Cross-site Scripting in Checkmk

CVE-2021-36563 – Multiple Stored and Reflected XSS Applicat...

Vulnerability fixed in CheckMK

A vulnerability has been fixed in CheckMK. A malicious party can exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser used to visit the application is visited. CheckMK has released updates to fix t...

CVE-2021-36563

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...

CVE-2021-36563

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...