CVE-2024-6052 MEDIUM

CVE-2024-6052: XSS in SQL check parameters

Vendor Checkmk Gmbh

Product Checkmk

Weakness CWE-80 · XSS · basic

Published July 3, 2024

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

Stored XSS in Checkmk before versions 2.3.0p8, 2.2.0p29, 2.1.0p45, and 2.0.0 (EOL) allows users to execute arbitrary scripts by injecting HTML elements

Key dates

02Disclosure timeline

July 3, 2024 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-6052 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/80.html

Related vulnerabilities

Identifiers

CVE CVE-2024-6052

CWE CWE-80

CVSS 6.5 / MEDIUM

Affected versions

Vendor Checkmk Gmbh

Product Checkmk

Affected ≥ 2.3.0 and < 2.3.0p8

Vendor Checkmk Gmbh

Product Checkmk

Affected ≥ 2.2.0 and < 2.2.0p29

Vendor Checkmk Gmbh

Product Checkmk

Affected ≥ 2.1.0 and < 2.1.0p45

Vendor Checkmk Gmbh

Product Checkmk

Affected ≥ 2.0.0 and ≤ 2.0.0p39

CVE-2024-6052: XSS in SQL check parameters

01Description

02Disclosure timeline

03References

04Related CVE