Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35 and <2.1.0p48 could lead to a leak of the token to facilitate targeted phishing attacks.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://checkmk.com/werk/17096 |
Configurations
No configuration.
History
15 Oct 2024, 12:57
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
14 Oct 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-14 08:15
Updated : 2024-10-15 12:57
NVD link : CVE-2024-38863
Mitre link : CVE-2024-38863
CVE.ORG link : CVE-2024-38863
JSON object : View
Products Affected
No product.
CWE
CWE-598
Use of GET Request Method With Sensitive Query Strings