Threats tagged 'ghsa-w4j5-4hxh-9mhv'

A path traversal vulnerability exists in the discovered host label synchronization feature of Checkmk versions prior to 2.5.0p19, 2.4.0p40, and in 2.3.0 (EOL). This flaw allows an attacker who controls a remote site in a distributed monitoring setup to write arbitrary files on the central site, potentially leading to code execution with the privileges of the central site user.