| Package | Affected versions | Patched versions |
|---|---|---|
| checkmk | = 2.2.0= 2.3.0= 2.4.0= 2.5.0 |
Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0 allows an attacker with dashboard creation privileges to perform stored cross-site scripting (XSS) attacks by tricking a victim into clicking a crafted dashlet title link on a shared dashboard.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free