{"id":"CVE-2024-2380","summary":"XSS in graph rendering","details":"Stored XSS in graph rendering in Checkmk \u003c2.3.0b4.","modified":"2026-08-12T03:51:27.505281923Z","published":"2024-04-05T13:01:08.382Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2380.json","unresolved_ranges":[{"extracted_events":[{"introduced":"2.3.0"},{"fixed":"2.3.0b4"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"Checkmk","cwe_ids":["CWE-80"]},"references":[{"type":"WEB","url":"https://checkmk.com/werk/16618"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2380.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2380"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/checkmk/checkmk","events":[{"introduced":"774354b2551f8e27948fc4cebfc950ee81d28e0d"},{"last_affected":"fd541d4d7d95668dd33d61bc16fa8df17f4affcf"}],"database_specific":{"extracted_events":[{"introduced":"2.3.0-b1"},{"last_affected":"2.3.0-b1"},{"introduced":"2.3.0-b2"},{"last_affected":"2.3.0-b2"},{"introduced":"2.3.0-b3"},{"last_affected":"2.3.0-b3"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:checkmk:checkmk:2.3.0:b1:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.3.0:b2:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.3.0:b3:*:*:*:*:*:*"]}}],"versions":["2.3.0-b1","2.3.0-b2","2.3.0-b3","v2.3.0p3-rc2","v2.3.0p3","v2.3.0p3-rc1","v2.3.0p2-rc1","v2.3.0p2","v2.3.0p1-rc1","v2.3.0p1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2380.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"}]}