CVE-2025-32916 LOW

CVE-2025-32916: Sensitive form data in URL query parameters

Vendor Checkmk Gmbh
Product Checkmk
Weakness CWE-598
Published October 9, 2025
Last update October 14, 2025
View on NVD All CVEs

CVSS base score

1.0/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

What the vulnerability does

01Description

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Key dates

02Disclosure timeline

October 9, 2025 CVE published
October 14, 2025 Record updated