Werk #6611: Fixed multiple reflected XSS attacks using AJAX calls

Component Setup
Title Fixed multiple reflected XSS attacks using AJAX calls
Date Sep 13, 2018
Checkmk Edition Checkmk Raw (CRE)
Checkmk Version 1.4.0p36 1.5.0p5 1.6.0b1
Level Trivial Change
Class Security Fix
Compatibility Compatible - no manual interaction needed

Several AJAX calls with invalid content type setting could be used to trigger XSS attacks.

To the list of all Werks