CVE-2024-38858: Checkmk

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view.

Affected products

• Checkmk Checkmk: before 2.3.0 (fixed in 2.3.0); version 2.3.0 only

Published 2024-09-02. Last modified 2026-06-17.