← Database

CVE-2022-24564

MEDIUM CVSS: 6.1 Published: 2022-02-21 Modified: 2026-06-17

Description

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.

Affected Platforms

Checkmk Checkmk

Weakness Type

CWE-79

References