Werk #8463: MKP Manager: Fixed possible HTML/JS injection from installed MKPs
Component | Setup |
Title | MKP Manager: Fixed possible HTML/JS injection from installed MKPs |
Date | Mar 23, 2016 |
Checkmk Edition | Checkmk Enterprise (CEE) |
Checkmk Version | 1.4.0i1 |
Level | Trivial Change |
Class | Security Fix |
Compatibility | Compatible - no manual interaction needed |
The meta information of installed MKPs which is displayed on the MKP Manager page could inject HTML/JS code to users which open up the page.