Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
| Software | From | Fixed in |
|---|---|---|
| checkmk / checkmk | 2.2.0-i1 | 2.2.0-i1.x |
| checkmk / checkmk | 2.2.0-b2 | 2.2.0-b2.x |
| checkmk / checkmk | 2.2.0-b1 | 2.2.0-b1.x |
| checkmk / checkmk | 2.2.0-b3 | 2.2.0-b3.x |
| checkmk / checkmk | 2.2.0 | 2.2.0.x |
| checkmk / checkmk | 2.2.0-b4 | 2.2.0-b4.x |
| checkmk / checkmk | 2.2.0-b5 | 2.2.0-b5.x |
| checkmk / checkmk | 2.2.0-b6 | 2.2.0-b6.x |
| checkmk / checkmk | 2.2.0-b7 | 2.2.0-b7.x |
| checkmk / checkmk | 2.2.0-b8 | 2.2.0-b8.x |
| checkmk / checkmk | 2.2.0-p1 | 2.2.0-p1.x |
| checkmk / checkmk | 2.2.0-p2 | 2.2.0-p2.x |
| checkmk / checkmk | 2.2.0-p3 | 2.2.0-p3.x |
| checkmk / checkmk | 2.2.0-p4 | 2.2.0-p4.x |
| checkmk / checkmk | 2.2.0-p5 | 2.2.0-p5.x |
| checkmk / checkmk | 2.2.0-p6 | 2.2.0-p6.x |
| checkmk / checkmk | 2.2.0-p7 | 2.2.0-p7.x |
| checkmk / checkmk | 2.2.0-p8 | 2.2.0-p8.x |
| checkmk / checkmk | 2.3.0-p1 | 2.3.0-p1.x |
| checkmk / checkmk | 2.3.0-p2 | 2.3.0-p2.x |
| checkmk / checkmk | 2.3.0-p3 | 2.3.0-p3.x |
| checkmk / checkmk | 2.3.0-p4 | 2.3.0-p4.x |
| checkmk / checkmk | 2.3.0-p5 | 2.3.0-p5.x |
| checkmk / checkmk | 2.3.0-p6 | 2.3.0-p6.x |
| checkmk / checkmk | 2.2.0-p10 | 2.2.0-p10.x |
| checkmk / checkmk | 2.2.0-p11 | 2.2.0-p11.x |
| checkmk / checkmk | 2.2.0-p12 | 2.2.0-p12.x |
| checkmk / checkmk | 2.2.0-p13 | 2.2.0-p13.x |
| checkmk / checkmk | 2.2.0-p14 | 2.2.0-p14.x |
| checkmk / checkmk | 2.2.0-p15 | 2.2.0-p15.x |
| checkmk / checkmk | 2.2.0-p16 | 2.2.0-p16.x |
| checkmk / checkmk | 2.2.0-p17 | 2.2.0-p17.x |
| checkmk / checkmk | 2.2.0-p19 | 2.2.0-p19.x |
| checkmk / checkmk | 2.2.0-p20 | 2.2.0-p20.x |
| checkmk / checkmk | 2.2.0-p21 | 2.2.0-p21.x |
| checkmk / checkmk | 2.2.0-p22 | 2.2.0-p22.x |
| checkmk / checkmk | 2.2.0-p23 | 2.2.0-p23.x |
| checkmk / checkmk | 2.2.0-p24 | 2.2.0-p24.x |
| checkmk / checkmk | 2.2.0-p25 | 2.2.0-p25.x |
| checkmk / checkmk | 2.2.0-p26 | 2.2.0-p26.x |
| checkmk / checkmk | 2.2.0-p27 | 2.2.0-p27.x |
| checkmk / checkmk | 2.2.0-p9 | 2.2.0-p9.x |
| checkmk / checkmk | 2.3.0 | 2.3.0.x |
| checkmk / checkmk | 2.3.0-b1 | 2.3.0-b1.x |
| checkmk / checkmk | 2.3.0-b2 | 2.3.0-b2.x |
| checkmk / checkmk | 2.3.0-b3 | 2.3.0-b3.x |
| checkmk / checkmk | 2.3.0-b4 | 2.3.0-b4.x |
| checkmk / checkmk | 2.3.0-b5 | 2.3.0-b5.x |
| checkmk / checkmk | 2.3.0-b6 | 2.3.0-b6.x |
| checkmk / checkmk | 2.2.0-p18 | 2.2.0-p18.x |
| checkmk / checkmk | - | 2.2.0.x |