CVE-2024-38860

Reflected links in error message facilitate phishing attacks PUBLISHED

Description (CNA)

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.2.0 before 2.2.0p34; affected 2.3.0 before 2.3.0p16

CWE

CWE-79

References

https://checkmk.com/werk/17094

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.