Werk #6612: Fixed possible reflected XSS using back URLs in view editor
Component | User interface | ||||||||||||||||
Title | Fixed possible reflected XSS using back URLs in view editor | ||||||||||||||||
Date | Sep 14, 2018 | ||||||||||||||||
Level | Trivial Change | ||||||||||||||||
Class | Security Fix | ||||||||||||||||
Compatibility | Compatible - no manual interaction needed | ||||||||||||||||
Checkmk versions & editions |
|
The parameter back of the following requests is vulnerable to reflected XSS. This vulnerability affects the create/modify view page and requires at least guest privileges. The victim has to click on the back button to trigger the injected code.