CVE-2024-13722 — Checkmk NagVis Reflected Cross-site Scripting
The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the conte…
Published: 2025-02-04 · CVSS: 5.4 · CVSS 3.1
The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once clicked. The attack can be performed on both authenticated and unauthenticated users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7