CVE-2024-2380
Assigner: Checkmk
Published: 2024-04-05T13:01:08.382Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Checkmk
vendor: Checkmk GmbH
versions: lessThan: 2.3.0b4
status: affected
version: 2.3.0
versionType: semver
descriptions: value: Stored XSS in graph rendering in Checkmk <2.3.0b4.
impacts: capecId: CAPEC-592
descriptions: value: CAPEC-592: Stored XSS
metrics: cvssV3_1: baseScore: 4.6
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-80
description: CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
type: CWE
title: XSS in graph rendering