CVE-2022-24565

Source
https://cve.org/CVERecord?id=CVE-2022-24565
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24565.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-24565
Downstream
Published
2022-02-22T11:03:39Z
Modified
2026-10-20T10:55:21Z
Summary
[none]
Details

Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications.

Database specific
{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24565.json"
}
References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-NA"
                },
                {
                    "last_affected":  "1.6.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-b1"
                },
                {
                    "last_affected":  "1.6.0-b1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p1"
                },
                {
                    "last_affected":  "1.6.0-p1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-b10"
                },
                {
                    "last_affected":  "1.6.0-b10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p10"
                },
                {
                    "last_affected":  "1.6.0-p10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-b12"
                },
                {
                    "last_affected":  "1.6.0-b12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p12"
                },
                {
                    "last_affected":  "1.6.0-p12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-b3"
                },
                {
                    "last_affected":  "1.6.0-b3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-b4"
                },
                {
                    "last_affected":  "1.6.0-b4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-b5"
                },
                {
                    "last_affected":  "1.6.0-b5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-b9"
                },
                {
                    "last_affected":  "1.6.0-b9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p11"
                },
                {
                    "last_affected":  "1.6.0-p11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p13"
                },
                {
                    "last_affected":  "1.6.0-p13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p14"
                },
                {
                    "last_affected":  "1.6.0-p14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p15"
                },
                {
                    "last_affected":  "1.6.0-p15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p16"
                },
                {
                    "last_affected":  "1.6.0-p16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p19"
                },
                {
                    "last_affected":  "1.6.0-p19"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p2"
                },
                {
                    "last_affected":  "1.6.0-p2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p20"
                },
                {
                    "last_affected":  "1.6.0-p20"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p21"
                },
                {
                    "last_affected":  "1.6.0-p21"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p22"
                },
                {
                    "last_affected":  "1.6.0-p22"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p23"
                },
                {
                    "last_affected":  "1.6.0-p23"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p24"
                },
                {
                    "last_affected":  "1.6.0-p24"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p25"
                },
                {
                    "last_affected":  "1.6.0-p25"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p26"
                },
                {
                    "last_affected":  "1.6.0-p26"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.6.0-p27"
                },
                {
                    "last_affected":  "1.6.0-p27"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-NA"
                },
                {
                    "last_affected":  "2.0.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b1"
                },
                {
                    "last_affected":  "2.0.0-b1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-i1"
                },
                {
                    "last_affected":  "2.0.0-i1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p1"
                },
                {
                    "last_affected":  "2.0.0-p1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b2"
                },
                {
                    "last_affected":  "2.0.0-b2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b3"
                },
                {
                    "last_affected":  "2.0.0-b3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b4"
                },
                {
                    "last_affected":  "2.0.0-b4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b5"
                },
                {
                    "last_affected":  "2.0.0-b5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b6"
                },
                {
                    "last_affected":  "2.0.0-b6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b7"
                },
                {
                    "last_affected":  "2.0.0-b7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-b8"
                },
                {
                    "last_affected":  "2.0.0-b8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p10"
                },
                {
                    "last_affected":  "2.0.0-p10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p11"
                },
                {
                    "last_affected":  "2.0.0-p11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p12"
                },
                {
                    "last_affected":  "2.0.0-p12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p13"
                },
                {
                    "last_affected":  "2.0.0-p13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p14"
                },
                {
                    "last_affected":  "2.0.0-p14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p15"
                },
                {
                    "last_affected":  "2.0.0-p15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p16"
                },
                {
                    "last_affected":  "2.0.0-p16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p17"
                },
                {
                    "last_affected":  "2.0.0-p17"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p18"
                },
                {
                    "last_affected":  "2.0.0-p18"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0-p19"
                },
                {
                    "last_affected":  "2.0.0-p19"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.6.0-NA
1.6.0-b1
1.6.0-b10
1.6.0-b12
1.6.0-b3
1.6.0-b4
1.6.0-b5
1.6.0-b9
1.6.0-p11
1.6.0-p13
1.6.0-p14
1.6.0-p15
1.6.0-p16
1.6.0-p19
1.6.0-p2
1.6.0-p20
1.6.0-p21
1.6.0-p22
1.6.0-p23
1.6.0-p24
1.6.0-p25
1.6.0-p26
1.6.0-p27
2.*
2.0.0-NA
2.0.0-b1
2.0.0-b2
2.0.0-b3
2.0.0-b4
2.0.0-b5
2.0.0-b6
2.0.0-b7
2.0.0-b8
2.0.0-p10
2.0.0-p11
2.0.0-p12
2.0.0-p13
2.0.0-p14
2.0.0-p15
2.0.0-p16
2.0.0-p17
2.0.0-p18
2.0.0-p19

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24565.json"