1-Click Compromise of Site Through Cross-Site Request Forgery Vulnerability
CVE-2024-28828
8.8HIGH
What is CVE-2024-28828?
A Cross-Site Request Forgery (CSRF) vulnerability exists in Checkmk versions below 2.3.0p8, 2.2.0p29, 2.1.0p45, and the end-of-life version 2.0.0p39. This vulnerability allows an attacker to perform unauthorized actions on behalf of a user without their consent, potentially leading to a compromise of the affected site with a single click. Users and administrators using vulnerable versions may face significant security risks, necessitating an immediate update to the latest version to mitigate this risk.
Affected Version(s)
Checkmk 2.3.0 < 2.3.0p8
Checkmk 2.2.0 < 2.2.0p29
Checkmk 2.1.0 < 2.1.0p45