CVE-2024-28831
No fix known EPSS <1%CVSS 5.4
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
Products: Checkmk GmbH Checkmk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 18.04 LTS | check-mk | no fix |
| Ubuntu Pro 16.04 LTS | check-mk | no fix |