Werk #12280: Fix XSS on host / folder properties page

Komponente WATO
Titel Fix XSS on host / folder properties page
Datum 02.03.2021
Checkmk-Editon Checkmk Raw (CRE)
Checkmk-Version 1.6.0p23 2.1.0i1 2.0.0b8
Level Kleine Änderung
Klasse Sicherheitsfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

A user with permissions to edit tag groups could trigger a stored XSS issue on the host and folder properties pages. This may lead to javascript code being executed in the browser of another user which is able to access the host and folder properties pages.

Zur Liste aller Werks