VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 21, 2022· Updated Jun 17, 2026

CVE-2022-24564

CVE-2022-24564

Description

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

23
  • Checkmk/Checkmk23 versions
    cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*
    • cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: <=2.0.0p19

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.