cve/2022/CVE-2022-48321.md

### [CVE-2022-48321](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48321)
![](https://img.shields.io/static/v1?label=Product&message=Checkmk&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.1.0%3C%3D%202.1.0p11%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-20%20Improper%20Input%20Validation&color=brighgreen)

### Description

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/JacobEbben/CVE-2022-47909_unauth_arbitrary_file_deletion
- https://github.com/gbrsh/checkmk-race