Security Advisory
CVE-2020-28919
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.