CVE-2024-38863: Checkmk

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35 and <2.1.0p48 could lead to a leak of the token to facilitate targeted phishing attacks.

Affected products

• Checkmk Checkmk: version 2.1.0 only; version 2.2.0 only; version 2.3.0 only

Published 2024-10-14. Last modified 2026-06-17.