CVE-2024-28828

Description

Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site.

Reserved 2024-03-11 | Published 2024-07-10 | Updated 2024-08-02 | Assigner Checkmk

Problem types

CWE-352: Cross-Site Request Forgery (CSRF)

Product status

Default status
unaffected

2.3.0 before 2.3.0p8
affected

2.2.0 before 2.2.0p29
affected

2.1.0 before 2.1.0p45
affected

2.0.0
affected

Credits

PS Positive Security GmbH reporter

References

checkmk.com/werk/17090

cve.org (CVE-2024-28828)

nvd.nist.gov (CVE-2024-28828)

Download JSON