Werk #13903: Introduce additional CSRF checks
| Komponente | Setup |
| Titel | Introduce additional CSRF checks |
| Datum | 16.05.2022 |
| Checkmk-Editon | Checkmk Raw (CRE) |
| Checkmk-Version | 2.2.0i1 2.1.0p2 2.0.0p26 |
| Level | Kleine Änderung |
| Klasse | Sicherheitsfix |
| Kompatibilität | Kompatibel - benötigt kein manuelles Eingreifen |
Previous to this Werk most data changing requests needed a transaction id. This mechanism was not used in all methods and in some cases the transaction id mechanism was not a good fit. So now a new CSRF token is introduced and checks are implemented in various locations.
If you scripted the UI you need to parse the CSRF token from the HTML and send it with the Post requests.