Description
Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6.0 (EOL) allow an attacker to add new visual elements to multiple pages.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Tribe29 | Checkmk | unaffected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-51020 | Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6.0 (EOL) allow an attacker to add new visual elements to multiple pages. |
References
| Link | Providers |
|---|---|
| https://checkmk.com/werk/14924 |
|
History
Wed, 12 Mar 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: Tribe29
Published:
Updated: 2025-03-12T18:10:01.870Z
Reserved: 2023-02-08T08:46:54.800Z
Link: CVE-2022-48320
Vulnrichment
Updated: 2024-08-03T15:10:59.719Z
NVD
Status : Modified
Published: 2023-02-20T17:15:12.530
Modified: 2024-11-21T07:33:09.393
Link: CVE-2022-48320
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses