CVE-2024-38858

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-38858
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38858.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-38858
Downstream
Published
2024-09-02T12:15:19.370Z
Modified
2026-03-12T05:51:00.234116Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.

References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
779a2941a075e1461b45407f715176524414b994
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
779a2941a075e1461b45407f715176524414b994
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
774354b2551f8e27948fc4cebfc950ee81d28e0d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b78272d604bfda3f7954ae5cec8ff3e3fddc5cf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
72fdb481b2f673c5a80d56cfec3dffa598195a0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a6aaa241192f2257300a50839bf7423b335b7771
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
418c120db01cb5030ac6d51e2b54b5277e44738b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ba483a2e011b281853e3d4789c7f77d5bd2915c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd541d4d7d95668dd33d61bc16fa8df17f4affcf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a6bc3d8dc8852375275f81654dd00a1f94f5ffd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1fc0aea14b848c3d4eaf779a42ac59e3af0e8df6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3c7ace5f5f48c54974558e49f4a088735be56a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4dabbfb583bb1e70b3257a8a3fc7bcdacaf8b4e9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f93c345b2ef1435d51333d3593a6b1701d5c249c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
241e7e776b96d316693575e91023518e20e171be
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p9"
        }
    ]
}

Affected versions

1.*
1.1.0beta17
v1.*
v1.1.0
v1.1.10
v1.1.10b1
v1.1.10b2
v1.1.11i1
v1.1.11i2
v1.1.11i3
v1.1.11i4
v1.1.12
v1.1.12b1
v1.1.12b2
v1.1.13i1
v1.1.13i2
v1.1.13i3
v1.1.2
v1.1.3
v1.1.3b1
v1.1.4
v1.1.5i0
v1.1.5i1
v1.1.5i2
v1.1.5i3
v1.1.6
v1.1.6b2
v1.1.6b3
v1.1.7i1
v1.1.7i2
v1.1.7i3
v1.1.7i4
v1.1.7i5
v1.1.8
v1.1.8b1
v1.1.8b2
v1.1.8b3
v1.1.9i1
v1.1.9i2
v1.1.9i3
v1.1.9i4
v1.1.9i5
v1.1.9i6
v1.1.9i7
v1.1.9i8
v1.1.9i9
v1.2.0b1
v1.2.0b2
v1.2.0b3
v1.2.0b4
v1.2.0b5
v1.2.0b6
v1.2.0p1
v1.2.0p2
v1.2.0p3
v1.2.1i1
v1.2.1i2
v1.2.1i3
v1.2.1i4
v1.2.1i5
v1.2.2b1
v1.2.3i1
v1.2.3i2
v1.2.3i3
v1.2.3i4
v1.2.3i5
v1.2.3i6
v1.2.3i7
v1.2.5i1
v1.2.5i2
v1.2.5i3
v1.2.5i4
v1.2.5i5
v1.2.5i6
v1.2.7i1
v1.2.7i2
v1.2.7i3
v1.4.0i1
v1.4.0i2
v1.4.0i3
v1.5.0i1
v1.5.0i2
v1.5.0i3
v1.6.0b1
v2.*
v2.0.0i1
v2.3.0-rc1
v2.3.0-rc2
v2.3.0b1
v2.3.0b1-rc1
v2.3.0b1-rc2
v2.3.0b2
v2.3.0b2-rc1
v2.3.0b3
v2.3.0b3-rc1
v2.3.0b4-rc1
v2.3.0b4-rc2
v2.3.0b5
v2.3.0b5-rc1
v2.3.0b6-rc1
v2.3.0p1
v2.3.0p1-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38858.json"