CVE-2023-6251
published 2023-11-24CVE-2023-6251: Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
PriorityP413low3.5CVSS 3.1
AVNACLPRLUIRSUCNILAN
EPSS
0.23%
14.0th percentile
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| checkmk | checkmk | — | — |
| checkmk | checkmk | — | — |
| checkmk | checkmk | — | — |
| checkmk_gmbh | checkmk | 2.0.0 – 2.0.0p39 | — |
| checkmk_gmbh | checkmk | >= 2.1.0 < 2.1.0p37 | 2.1.0p37 |
| checkmk_gmbh | checkmk | >= 2.2.0 < 2.2.0p15 | 2.2.0p15 |
CVSS provenance
nvdv3.13.5LOWCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
osv3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-6251: Cross-site Request Forgery (CSRF) in Checkmk < 2
osv·2023-11-24·CVSS 3.5
CVE-2023-6251 [LOW] CVE-2023-6251: Cross-site Request Forgery (CSRF) in Checkmk < 2
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
GHSA
GHSA-69fm-h692-4f7v: Cross-site Request Forgery (CSRF) in Checkmk < 2
ghsa_unreviewed·2023-11-24
CVE-2023-6251 [LOW] CWE-352 GHSA-69fm-h692-4f7v: Cross-site Request Forgery (CSRF) in Checkmk < 2
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-11-24
Published