← CVE Intelligence

CVE-2024-38857

Reflected links in visuals facilitate phishing attacks PUBLISHED

Description (CNA)

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attackers to craft malicious links that can facilitate phishing attacks.

Affected (CNA)

Vendor / productVersions
Checkmk GmbH / Checkmkaffected 2.3.0 before 2.3.0p8; affected 2.2.0 before 2.2.0p28; affected 2.1.0 before 2.1.0p45; affected 2.0.0 through 2.0.0p39

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.