Checkmk 2.0 is here! See what's new.

Werk #10242: Fix possible XSS using titles of custom snapins

Component GUI
Title Fix possible XSS using titles of custom snapins
Date Sep 27, 2019
Checkmk Editon Checkmk Raw (CRE)
Checkmk Version 2.0.0i1 1.6.0p3
Level Trivial Change
Class Security Fix
Compatibility Compatible - no manual interaction needed

Authenticated users that are allowed to configure and share custom snapins could inject arbitrary JS code to all users which are permitted to view this snapin.

To the list of all Werks