Werk #8463: MKP Manager: Fixed possible HTML/JS injection from installed MKPs

Name: checkmk
Rating: 4.7 (114 reviews)

Component

Setup

Title

MKP Manager: Fixed possible HTML/JS injection from installed MKPs

Date

Mar 23, 2016

Level

Trivial Change

Class

Security Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

1.4.0i1	Checkmk Enterprise (CEE), Checkmk MSP (CME)

The meta information of installed MKPs which is displayed on the MKP Manager page could inject HTML/JS code to users which open up the page.