Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the output_format parameter, and the username parameter of failed HTTP basic authentication attempts, which is returned unencoded in an internal server error page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mathias Kettner Check_MK 跨站脚本漏洞
Vulnerability Description
Mathias Kettner Check_MK是德国Mathias Kettner公司的一套开源、通用的Nagios/Icinga（监视系统）数据采集插件，它通过采用新的方法从操作系统和网络组件中收集数据，并支持自动检测主机上的监控项目。 Mathias Kettner Check_MK 1.2.8p25之前的1.2.8x版本和1.4.0p9之前的1.4.0x版本中存在跨站脚本漏洞。远程攻击者可借助‘output_format’和‘sername’参数存利用该漏洞注入任意的HTML或JavaScript
CVSS Information
N/A
Vulnerability Type
N/A