CVE-2023-6251

CSRF in delete_user_message

Published Nov 24, 2023 CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Description
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-58496 Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Checkmk
Published
Updated
Aug 2, 2024, 8:21 AM
Reserved
Nov 22, 2023, 10:39 AM
Status
Modified
Published
Nov 24, 2023, 9:15 AM
Modified
Jun 17, 2026, 6:50 AM