CVE-2022-24564

Source
https://cve.org/CVERecord?id=CVE-2022-24564
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24564.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-24564
Published
2022-02-21T22:14:24Z
Modified
2026-10-24T10:30:58Z
Summary
[none]
Details

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.

Database specific
{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24564.json"
}
References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-NA"
                },
                {
                    "last_affected":  "2.0.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b1"
                },
                {
                    "last_affected":  "2.0.0-b1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-i1"
                },
                {
                    "last_affected":  "2.0.0-i1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p1"
                },
                {
                    "last_affected":  "2.0.0-p1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b2"
                },
                {
                    "last_affected":  "2.0.0-b2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b3"
                },
                {
                    "last_affected":  "2.0.0-b3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b4"
                },
                {
                    "last_affected":  "2.0.0-b4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b5"
                },
                {
                    "last_affected":  "2.0.0-b5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b6"
                },
                {
                    "last_affected":  "2.0.0-b6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b7"
                },
                {
                    "last_affected":  "2.0.0-b7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b8"
                },
                {
                    "last_affected":  "2.0.0-b8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p10"
                },
                {
                    "last_affected":  "2.0.0-p10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p11"
                },
                {
                    "last_affected":  "2.0.0-p11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p12"
                },
                {
                    "last_affected":  "2.0.0-p12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p13"
                },
                {
                    "last_affected":  "2.0.0-p13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p14"
                },
                {
                    "last_affected":  "2.0.0-p14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p15"
                },
                {
                    "last_affected":  "2.0.0-p15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p16"
                },
                {
                    "last_affected":  "2.0.0-p16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p17"
                },
                {
                    "last_affected":  "2.0.0-p17"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p18"
                },
                {
                    "last_affected":  "2.0.0-p18"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p19"
                },
                {
                    "last_affected":  "2.0.0-p19"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

2.*
2.0.0-NA
2.0.0-b1
2.0.0-b2
2.0.0-b3
2.0.0-b4
2.0.0-b5
2.0.0-b6
2.0.0-b7
2.0.0-b8
2.0.0-p10
2.0.0-p11
2.0.0-p12
2.0.0-p13
2.0.0-p14
2.0.0-p15
2.0.0-p16
2.0.0-p17
2.0.0-p18
2.0.0-p19
v2.*
v2.0.0
v2.0.0p1
v2.0.0p10
v2.0.0p11
v2.0.0p12
v2.0.0p13
v2.0.0p14
v2.0.0p15
v2.0.0p16
v2.0.0p17
v2.0.0p18
v2.0.0p19
v2.0.0p3
v2.0.0p4
v2.0.0p5
v2.0.0p6
v2.0.0p7
v2.0.0p8
v2.0.0p9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24564.json"