Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-28919
HistoryJan 15, 2022 - 12:00 a.m.

CVE-2020-28919

2022-01-1500:00:00
ubuntu.com
ubuntu.com
12
checkmk
cross site scripting
javascript injection
cve-2020-28919
security vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

36.6%

JSON

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior
to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary
JavaScript via a javascript: URL in a view title.

Notes

Author Note
0xnishit fix 1.6.0p19: https://github.com/tribe29/checkmk/commit/87ceb966b1ae46947b696232af84a4f9f0ab74e1 fix 1.6.0p19: https://github.com/tribe29/checkmk/commit/fdc83feb6afa04ad48a6de5e211322850470a86f fix 2.0.0i1: https://github.com/tribe29/checkmk/commit/c00f450f884d8a229b7d8ab3f0452ed802a1ae04 fix 2.0.0i1: https://github.com/tribe29/checkmk/commit/e7fd8e4c90be490e4293ec91804d00ec01af5ca6

Related

prion 1
cvelist 1
osv 1
cnvd 1
cve 1
openvas 1
nvd 1
prion
prion
Cross site scripting
2022-01-15 17:15:00
cvelist
cvelist
CVE-2020-28919
2022-01-15 16:34:59
osv
osv
CVE-2020-28919
2022-01-15 17:15:08
cnvd
cnvd
Checkmk Cross-Site Scripting Vulnerability (CNVD-2022-21235)
2022-01-17 00:00:00
cve
cve
CVE-2020-28919
2022-01-15 17:15:08
openvas
openvas
Check MK 1.6.0x < 1.6.0p19 XSS Vulnerability
2022-06-20 00:00:00
nvd
nvd
CVE-2020-28919
2022-01-15 17:15:08

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

36.6%

JSON
Related for UB:CVE-2020-28919
prion1cvelist1osv1cnvd1cve1openvas1nvd1