CVE-2023-22288: Checkmk

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

HTML Email Injection in Tribe29 Checkmk <=2.1.0p23; <=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails

Affected products

• Checkmk Checkmk: version 2.0.0 only; version 2.1.0 only
• TRIBE29 Checkmk: from 1.6.0, before 2.0.0 (fixed in 2.0.0)

Published 2023-03-20. Last modified 2026-06-17.