Werk #1052: index start URL can not be used to redirect to absolute URLs anymore

Komponente User interface
Titel index start URL can not be used to redirect to absolute URLs anymore
Datum 04.07.2014
Checkmk Edition Checkmk Raw (CRE)
Checkmk-Version 1.2.5i5
Level Kleine Änderung
Klasse Sicherheitsfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

An attacker could make a user open up an URL to a compromised website which the does not want to open index.py?start_url=http://(url to compromised URL).

Zur Liste aller Werks