| Package | Affected versions | Patched versions |
|---|---|---|
| checkmk | = 2.2.0= 2.3.0= 2.4.0≥ 2.1.0, < 2.2.0 | 2.2.0 |
Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free