In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting (XSS).
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "1.6.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b10"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b12"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b9"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p11"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p12"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p13"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p14"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p15"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p16"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p19"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p2"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p20"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p21"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p22"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p23"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p24"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p25"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p26"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p27"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b2"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b6"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b7"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b8"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-i1"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p11"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p12"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p13"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p14"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p15"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p16"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p17"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p18"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p19"
}
]
}