AttackFeed by Joe Wagner | [SBA-ADV-20250729-01] CVE-2025-39663: Checkmk Cross Site Scripting  - Full Disclosure

[SBA-ADV-20250729-01] CVE-2025-39663: Checkmk Cross Site Scripting  – Full Disclosure

Posted on By Joe-W No Comments on [SBA-ADV-20250729-01] CVE-2025-39663: Checkmk Cross Site Scripting  – Full Disclosure
Alert Feeds

 

Posted by SBA Research Security Advisory via Fulldisclosure on Nov 07

# Checkmk Cross Site Scripting #

Link: https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250729-01_Checkmk_Cross_Site_Scripting

## Vulnerability Overview ##

Checkmk in versions before 2.4.0p14 and 2.3.0p39, as well as in branches
2.2.0, 2.1.0 and 2.0.0 is prone to a Stored Cross-Site Scripting (XSS)
vulnerability when used in a distributed monitoring setup. Any connected
remote site can inject JavaScript code in the central…
 – Read More  – Full Disclosure 

You may also like

Alert Feeds
Re: Defense in depth — the Microsoft way (part 93): SRP/SAFER whitelisting goes black on Windows 11  – Full Disclosure
October 7, 2025
Alert Feeds
APPLE-SA-07-29-2025-7 tvOS 18.6  – Full Disclosure
July 30, 2025
Alert Feeds
Asterisk Security Release 20.15.2  – Full Disclosure
September 8, 2025
Alert Feeds
BSidesSF 2026 CFP still open until October 28th  – Full Disclosure
October 21, 2025

Leave a Reply

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.