Threats tagged 'ghsa-79m2-wqr8-q2wm'

A path traversal vulnerability exists in the Synthetic Monitoring "Robotmk" test service of Checkmk versions prior to 2.5.0p19, 2.4.0p40, and the 2.3.0 EOL version. This flaw allows an attacker who can control the agent output of a monitored host to inject crafted robot output that specifies the contents and location of generated HTML logs, potentially leading to code execution with the privileges of the site user.