Werk #15713: NagVis: Updated to 1.9.38

Komponente

Other components

Titel

NagVis: Updated to 1.9.38

Datum

14.10.2023

Level

Kleine Änderung

Klasse

Sicherheitsfix

Kompatibilität

Kompatibel - benötigt kein manuelles Eingreifen

Checkmk versions & editions

2.3.0b1	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.2.0p12	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.1.0p35	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

NagVis 1.9.38 fixes a XSS issue

Vulnerability Management: We have rated the issue with a CVSS Score of 8.4 (High) with the following CVSS vector: CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H 8.4.

CVE-2023-46287 was assigned to this issue.

Changes: This Werk introduces escaping for the vulnerable parameter.

Zur Liste aller Werks