back to website

Werk #17092: Fix missing CSRF token issues

Component Setup
Title Fix missing CSRF token issues
Date Jul 3, 2024
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.4.0b1
Not yet released 		Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0p9 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.2.0p30 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.1.0p45 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

Werk #17090 in Checkmk 2.3.0p8 and 2.2.0p29 introduced additional CSRF token checks in the GUI. This caused some buttons to not work anymore because the CSRF token was missing, including, but likely not limited to:

  • "Synchronize users" in Setup > Users to manually trigger the LDAP sync (the background sync still runs)
  • "Show analysis" and "Show bulks" in Setup > Events > Notifications
  • Reordering notification rules via drag-and-drop in the same view
  • "Bake agents" in the agent bakery (as a workaround, use "Bake and sign agents")
  • "Acknowledge last baking result" when a bake job failed (as a workaround, delete the failed job instead)

This Werk fixes the issues by adding the token.

To the list of all Werks