Catch up on the latest product updates, best practices, and expert insights from the Checkmk Conference #12 – Watch the livestream recordings now
back to website

Werk #5431: Fixed possible reflected XSS using custom bookmarks

Component User interface
Title Fixed possible reflected XSS using custom bookmarks
Date Nov 3, 2017
Level Trivial Change
Class Security Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
1.5.0i1 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT
1.4.0p17 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT

It was possible to create custom bookmarks by making the user open a crafted URL. This created a bookmark in the users default bookmark list which could be used to execute custom javascript code when the user clicks on the just created link.

For example the user session cookies can be read and reported to the attackers, who could then hijack the users sessions with the application.

This issue has been fixed by limiting absolute URLs in bookmarks to the URL schemes https and http.

To the list of all Werks