CVE-2020-28919

概要

参考情報

• checkmk.com/check_mk-werks.php · Vendor Advisory
• emacsninja.com/posts/cve-2020-28919-stored-xss-in-checkmk-160p18.html · Exploit
• tribe29/checkmk commit c00f450 · Patch
• tribe29/checkmk commit e7fd8e4 · Patch

checkmk のその他の脆弱性

• CVE-2026-9549中 4.8Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions a…
• CVE-2026-8833中 5.4Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 v…
• CVE-2026-8078中 4.8Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an ad…
• CVE-2026-7765中 5.3Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashbo…
• CVE-2026-7186中 5.4Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with…