Riskcovery

CVE-2023-6251

CSRF in delete_user_message

State
Published
Severity
3.5 Low
Published
Nov 24, 2023
Updated
Aug 2, 2024
Reserved
Nov 22, 2023

Read the record on cve.org

Description

Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.

Scores

CVSSScoreVectorSource
3.13.5 LowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NCheckmk

Weaknesses

  • CWE-352 Cross-Site Request Forgery (CSRF)

Affected Products

ProductVersions
CheckmkCheckmk GmbH
  • 2.0.0 through 2.0.0p39Affected
  • 2.1.0 to before 2.1.0p37Affected
  • 2.2.0 to before 2.2.0p15Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.