Werk #6611: Fixed multiple reflected XSS attacks using AJAX calls

Komponente Setup
Titel Fixed multiple reflected XSS attacks using AJAX calls
Datum 13.09.2018
Level Kleine Änderung
Klasse Sicherheitsfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen
Checkmk versions & editions
1.6.0b1 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.5.0p5 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.4.0p36 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

Several AJAX calls with invalid content type setting could be used to trigger XSS attacks.

Zur Liste aller Werks