XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 (EOL) allowed malicious users to execute arbitrary scripts by injecting HTML elements into the SLA column title. These scripts could be executed when the view page was cloned by other users.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "2.0.0"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b2"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b6"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b7"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b8"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b9"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p11"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p12"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p13"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p14"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p15"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p16"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p17"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p18"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p19"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p2"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p20"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p21"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p22"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p23"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p24"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p25"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p26"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p27"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p28"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p29"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p3"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p30"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p31"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p32"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p33"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p34"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p35"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p36"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p37"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p38"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p39"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p4"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p40"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p41"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p42"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p43"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p44"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p45"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p46"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p5"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p6"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p7"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p8"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p9"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b2"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b6"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b7"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-b8"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-i1"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p11"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p12"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p13"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p14"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p15"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p16"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p17"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p18"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p19"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p2"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p20"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p21"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p22"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p23"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p24"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p25"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p26"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p27"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p28"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p29"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p3"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p30"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p31"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p32"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p4"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p5"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p6"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p7"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p8"
},
{
"introduced": "0"
},
{
"last_affected": "2.2.0-p9"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-b2"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-b6"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p11"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p12"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p13"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p2"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p3"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p4"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p5"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p6"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p7"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p8"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.0-p9"
}
]
}