CVE-2023-22309

Medium

Description

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4.

SeverityMedium
CVSS6.1
Exploit probability—
ProductTribe29 Checkmk Appliance Firmware
PublishedApr 20, 2023
First seenApr 20, 2023
Weakness typeCWE-80CWE-80

How to fix

Update
  • tribe29 checkmk_appliance_firmware1.6.4 or later

Affected products

ProductAffected versionsFixed in
tribe29 checkmk_appliance_firmwarev < 1.6.41.6.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.