Werk #6610: Fixed possible XSS using the dokuwiki snapin

Component

User interface

Title

Fixed possible XSS using the dokuwiki snapin

Date

Sep 13, 2018

Level

Trivial Change

Class

Security Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

1.6.0b1	Checkmk Community, Checkmk Pro, Checkmk Ultimate MT
1.5.0p5	Checkmk Community, Checkmk Pro, Checkmk Ultimate MT
1.4.0p36	Checkmk Community, Checkmk Pro, Checkmk Ultimate MT

The content of the DokuWiki page named "sidebar" was inserted into the DokuWiki view of Check_MK, but was is not correctly sanitized. This can only be done by an administrator of the page, but every user who can access the DokuWiki view was affected by the vulnerability.

To the list of all Werks