CVE-2020-28919 : A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6

A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.

Published 2022-01-15 17:15:08

Updated 2024-07-23 19:37:17

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2020-28919

Checkmk » Checkmk » Version: 1.6.0
cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P1
cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P10
cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P11
cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P12
cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P13
cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P14
cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P15
cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P16
cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P2
cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P3
cpe:2.3:a:checkmk:checkmk:1.6.0:p3:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P4
cpe:2.3:a:checkmk:checkmk:1.6.0:p4:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P5
cpe:2.3:a:checkmk:checkmk:1.6.0:p5:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P6
cpe:2.3:a:checkmk:checkmk:1.6.0:p6:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P7
cpe:2.3:a:checkmk:checkmk:1.6.0:p7:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P8
cpe:2.3:a:checkmk:checkmk:1.6.0:p8:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P9
cpe:2.3:a:checkmk:checkmk:1.6.0:p9:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update B1
cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update B10
cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update B12
cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update B3
cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update B4
cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update B5
cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update B9
cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P17
cpe:2.3:a:checkmk:checkmk:1.6.0:p17:*:*:*:*:*:*
Matching versions
Checkmk » Checkmk » Version: 1.6.0 Update P18
cpe:2.3:a:checkmk:checkmk:1.6.0:p18:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-28919

EPSS FAQ

0.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 44 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-28919

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N	6.8	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N	2.3	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2020-28919

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-28919

https://emacsninja.com/posts/cve-2020-28919-stored-xss-in-checkmk-160p18.html

Emacs Ninja - CVE-2020-28919: Stored XSS in Checkmk 1.6.0p18
Exploit;Third Party Advisory
https://github.com/tribe29/checkmk/commit/e7fd8e4c90be490e4293ec91804d00ec01af5ca6

Prevent non http/https links from being unescaped · tribe29/checkmk@e7fd8e4 · GitHub
Patch
https://github.com/tribe29/checkmk/commit/c00f450f884d8a229b7d8ab3f0452ed802a1ae04

Rewrite matching a href unescape regex to separate attributes · tribe29/checkmk@c00f450 · GitHub
Patch;Third Party Advisory
https://checkmk.com/check_mk-werks.php?werk_id=11501

Fix possible XSS using titles of views
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-28919

Products affected by CVE-2020-28919

Exploit prediction scoring system (EPSS) score for CVE-2020-28919

CVSS scores for CVE-2020-28919

CWE ids for CVE-2020-28919

References for CVE-2020-28919