{"id":"CVE-2023-22288","aliases":["EUVD-2023-26452","GHSA-3g55-gxf8-m8xp","UBUNTU-CVE-2023-22288"],"status":"published","title":"Email HTML Injection","description":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00402,"percentile":0.34771,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-138","CWE-79"],"published":"2023-03-20T15:33:59Z","modified":"2026-10-24T10:30:16Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"check-mk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.6p5-1","1.2.6p12-1","1.2.6p12-1ubuntu0.16.04.1","1.2.6p12-1ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"check-mk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.8p16-1ubuntu0.1","1.2.8p16-1ubuntu0.2"]}],"products":[{"vendor":"checkmk","product":"checkmk"},{"vendor":"checkmk gmbh","product":"checkmk"},{"vendor":"tribe29","product":"checkmk"}],"references":[{"url":"https://checkmk.com/werk/15069","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22288"},{"url":"https://github.com/advisories/GHSA-3g55-gxf8-m8xp"},{"url":"https://ubuntu.com/security/CVE-2023-22288","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22288","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-22288","title":"Email HTML Injection","description":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails","status":"published","published":"2023-03-20T15:33:59.877Z","modified":"2025-02-26T19:09:03.592Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-138"],"updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-26452","description":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails","status":"published","published":"2023-03-20T15:33:59Z","modified":"2025-02-26T19:09:03Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:22.849013Z"}],"ghsa":[{"id":"GHSA-3g55-gxf8-m8xp","title":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0...","description":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails","status":"published","published":"2023-03-20T18:30:54Z","modified":"2024-07-23T21:31:33Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79","CWE-138"],"updated_at":"2026-11-02T14:57:44.165395Z"}],"nvd":[{"id":"CVE-2023-22288","description":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails","status":"published","published":"2023-03-20T16:15:13.12Z","modified":"2026-06-17T05:34:57.837Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-138","CWE-79"],"updated_at":"2026-11-02T14:07:49.031498Z"}],"osv":[{"id":"CVE-2023-22288","description":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails","status":"published","published":"2023-03-20T16:15:13.12Z","modified":"2026-10-24T10:30:16.548829069Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"UBUNTU-CVE-2023-22288","description":"HTML Email Injection in Tribe29 Checkmk \u003c=2.1.0p23; \u003c=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails","status":"published","published":"2023-03-20T16:15:00Z","modified":"2025-10-24T05:01:46Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:20.198616Z"}]}}