CVE Vulnerabilities

CVE-2025-32916

Use of GET Request Method With Sensitive Query Strings

Published: Oct 09, 2025 | Modified: Oct 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Potential use of sensitive information in GET requests in Checkmk GmbHs Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Weakness

The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

Potential Mitigations

References