Vulnerabilities > Tribe29 > Checkmk > 1.6.0p13

DATE CVE VULNERABILITY TITLE RISK
2022-03-25 CVE-2021-40905 Unrestricted Upload of File with Dangerous Type vulnerability in Tribe29 Checkmk
The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible.
network
low complexity
tribe29 CWE-434
8.8