CVE-2024-28831

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-28831
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-28831.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-28831
Downstream
Published
2024-06-25T12:15:09.490Z
Modified
2026-03-13T08:03:00.294678Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.

References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d6049cd2d82eba3842b30c305912b9e946842463
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d6049cd2d82eba3842b30c305912b9e946842463
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6d181fbfbfbc98415313b4cb0ad96ded5ddd7abd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
267fa27ce44b36ca91fbd6446837c5713df736fc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
93590d801961d180c7958a478839a07b2cbb1d77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a9f01eaebaa33dd83008b72d3a7f54321d42b73
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c5a9ed82c6f3115b7aaa46c6aa1b63953d8d5ce5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d85a2e5143ecba3b73784a9825264d0a576382b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d4289fb7f58f6387d62713179131946f44a9aa69
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d2607dde3dd4fcaf3357df418f83060293bed122
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6d181fbfbfbc98415313b4cb0ad96ded5ddd7abd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6d181fbfbfbc98415313b4cb0ad96ded5ddd7abd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
324bd38f5b76f73f236e495af0c9228b65d15528
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0d2681c53226611c965c0d94ff233e497b5a4317
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5cf0476d6b0cba20b3aafb01b187c63a9fda92bd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5554a04b2c158ae9b0e01ef1b591fe3702ea5ac0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eda43696c54223b7b5fdcf3f4c3a44ab841061fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e5861f0cab1099a17d23657c9ed1054590f5c769
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4cbff4e1a0ac90dc4d91939fc63184a0fcc0c3da
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
89df3c399664ac47711f628042b180222de1580d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a194cdc9f337ef68e31af63eedf88054f7fddc1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
35f34b0cf3e832750898c365d1a492f7b76a4c6e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
267fa27ce44b36ca91fbd6446837c5713df736fc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
be4ee84ebb62f6f7a9af75bf026585e6561fafc2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
996ca03a86e23025fe7544b47005043ae6be9084
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f9da425b482f2e430343b235449ff33114bf4ddc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
22de8967ee57635f022996260036f7059c359d77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2bc11315273eb7bdbd3ca42f4d726527b204519e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
65236b565e0f57dd058f395704b20154aff30847
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b6b3d5d682a04ac1de9f5a7e6aab4bec9529562c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a889f51a7d8216e1ac9b9db00637ae8179a0dd53
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
93590d801961d180c7958a478839a07b2cbb1d77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a9f01eaebaa33dd83008b72d3a7f54321d42b73
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c5a9ed82c6f3115b7aaa46c6aa1b63953d8d5ce5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d85a2e5143ecba3b73784a9825264d0a576382b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d4289fb7f58f6387d62713179131946f44a9aa69
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d2607dde3dd4fcaf3357df418f83060293bed122
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
07125838894d877a8f3c6110dc28ec40ba9fff8f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
779a2941a075e1461b45407f715176524414b994
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
774354b2551f8e27948fc4cebfc950ee81d28e0d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ba483a2e011b281853e3d4789c7f77d5bd2915c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd541d4d7d95668dd33d61bc16fa8df17f4affcf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a6bc3d8dc8852375275f81654dd00a1f94f5ffd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1fc0aea14b848c3d4eaf779a42ac59e3af0e8df6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3c7ace5f5f48c54974558e49f4a088735be56a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
774354b2551f8e27948fc4cebfc950ee81d28e0d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ba483a2e011b281853e3d4789c7f77d5bd2915c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd541d4d7d95668dd33d61bc16fa8df17f4affcf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a6bc3d8dc8852375275f81654dd00a1f94f5ffd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1fc0aea14b848c3d4eaf779a42ac59e3af0e8df6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3c7ace5f5f48c54974558e49f4a088735be56a8
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-b8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-i1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p22"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-b2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-b3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-b4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-b5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-b6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p6"
        }
    ]
}

Affected versions

1.*
1.1.0beta17
v1.*
v1.1.0
v1.1.10
v1.1.10b1
v1.1.10b2
v1.1.11i1
v1.1.11i2
v1.1.11i3
v1.1.11i4
v1.1.12
v1.1.12b1
v1.1.12b2
v1.1.13i1
v1.1.13i2
v1.1.13i3
v1.1.2
v1.1.3
v1.1.3b1
v1.1.4
v1.1.5i0
v1.1.5i1
v1.1.5i2
v1.1.5i3
v1.1.6
v1.1.6b2
v1.1.6b3
v1.1.7i1
v1.1.7i2
v1.1.7i3
v1.1.7i4
v1.1.7i5
v1.1.8
v1.1.8b1
v1.1.8b2
v1.1.8b3
v1.1.9i1
v1.1.9i2
v1.1.9i3
v1.1.9i4
v1.1.9i5
v1.1.9i6
v1.1.9i7
v1.1.9i8
v1.1.9i9
v1.2.0b1
v1.2.0b2
v1.2.0b3
v1.2.0b4
v1.2.0b5
v1.2.0b6
v1.2.0p1
v1.2.0p2
v1.2.0p3
v1.2.1i1
v1.2.1i2
v1.2.1i3
v1.2.1i4
v1.2.1i5
v1.2.2b1
v1.2.3i1
v1.2.3i2
v1.2.3i3
v1.2.3i4
v1.2.3i5
v1.2.3i6
v1.2.3i7
v1.2.5i1
v1.2.5i2
v1.2.5i3
v1.2.5i4
v1.2.5i5
v1.2.5i6
v1.2.7i1
v1.2.7i2
v1.2.7i3
v1.4.0i1
v1.4.0i2
v1.4.0i3
v1.5.0i1
v1.5.0i2
v1.5.0i3
v1.6.0b1
v2.*
v2.0.0i1
v2.2.0
v2.2.0-rc1
v2.2.0b1
v2.2.0b1-rc1
v2.2.0b1-rc2
v2.2.0b2
v2.2.0b2-rc1
v2.2.0b3
v2.2.0b3-rc1
v2.2.0b4
v2.2.0b4-rc1
v2.2.0b5
v2.2.0b5-rc1
v2.2.0b5-rc2
v2.2.0b6
v2.2.0b6-rc1
v2.2.0b7
v2.2.0b7-rc1
v2.2.0b8
v2.2.0b8-rc1
v2.3.0
v2.3.0-rc1
v2.3.0-rc2
v2.3.0-rc3
v2.3.0b1
v2.3.0b1-rc1
v2.3.0b1-rc2
v2.3.0b2
v2.3.0b2-rc1
v2.3.0b3
v2.3.0b3-rc1
v2.3.0b4-rc1
v2.3.0b4-rc2
v2.3.0b5
v2.3.0b5-rc1
v2.3.0b6-rc1
v2.3.0p1
v2.3.0p1-rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-28831.json"