← CVE Intelligence

CVE-2024-28831

XSS in confirmation pop-up PUBLISHED

Description (CNA)

Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.

Affected (CNA)

Vendor / productVersions
Checkmk GmbH / Checkmkaffected 2.3.0 before 2.3.0p7; affected 2.2.0 before 2.2.0p28

CWE

CWE-80

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.