Werk #12280: Fix XSS on host / folder properties page
Komponente | Setup |
Titel | Fix XSS on host / folder properties page |
Datum | 02.03.2021 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk-Version | 1.6.0p23 2.0.0b8 2.1.0b1 |
Level | Kleine Änderung |
Klasse | Sicherheitsfix |
Kompatibilität | Kompatibel - benötigt kein manuelles Eingreifen |
A user with permissions to edit tag groups could trigger a stored XSS issue on the host and folder properties pages. This may lead to javascript code being executed in the browser of another user which is able to access the host and folder properties pages.