Vulnerability in Checkmk Gmbh
CVE-2024-38865
Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 (EOL) allows arbitrary livestatus command execution. Exploitation requires the attacker to…
EPSS: 0.003 (53.6th percentile) — read the EPSS interpretation.
Affected products
- Checkmk Gmbh — versions 2.3.0, 2.2.0, 2.1.0