Skip to content
CVE PROGRAM SOURCE RECORD1.0 Low

CVE-2025-32916

Sensitive form data in URL query parameters

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Checkmk

Description

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.4.0 to < 2.4.0p13affected
  • 2.3.0 to < 2.3.0p38affected
  • 2.2.0 to < 2.2.0p46affected
  • 2.1.0affected

References