Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2024-38863

CSRF token leaked in URL parameters

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Checkmk

Description

Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35 and <2.1.0p48 could lead to a leak of the token to facilitate targeted phishing attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.1.0 to < 2.1.0p48affected
  • 2.2.0 to < 2.2.0p35affected
  • 2.3.0 to < 2.3.0p18affected

References