Werk #10703: Fix some reflected XSS issues

Name: checkmk
Rating: 4.7 (114 reviews)

Component

User interface

Title

Fix some reflected XSS issues

Date

Jan 18, 2020

Level

Trivial Change

Class

Security Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.0.0i1	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.6.0p9	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

Fixed several reflected XSS issues that were possible because some webservice responses that may contain user provided strings were not correctly encoded.

To the list of all Werks