Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2022-48321

SSRF in agent-receiver API

Description

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tribe29 Checkmk

Default version status: unaffected

  • 2.1.0 to ≤ 2.1.0p11affected

References