Explore the latest product updates and best practices at our hybrid Checkmk Conference #12 from June 16-18, 2026 – Register here
back to website

Werk #11501: Fix possible XSS using titles of views

Component User interface
Title Fix possible XSS using titles of views
Date Oct 20, 2020
Level Trivial Change
Class Security Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.0.0i1 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT
1.6.0p19 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT

Authenticated users that are allowed to configure and share custom views could inject arbitrary JS code to all users which are permitted to view this view.

To the list of all Werks