[checkmk-commits] [tribe29/checkmk] 7893a7: 13066 SEC Fix path traversal vulnerability

Branch: refs/heads/2.0.0 Home: https://github.com/tribe29/checkmk Commit: 7893a774ffb5bb611dd507cac952a0d76849eaa2 https://github.com/tribe29/checkmk/commit/7893a774ffb5bb611dd507cac952a0d76… Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com> Date: 2021-07-26 (Mon, 26 Jul 2021) Changed paths: A .werks/13066 M cmk/gui/inventory.py M cmk/gui/plugins/views/inventory.py Log Message: ----------- 13066 SEC Fix path traversal vulnerability An authenticated user was able to enumerate the filesystem, accessible to the siteuser. No file contents were disclosed. CMK-7138 Change-Id: I8a2ca0801e148cbb703922c0efbf2c19c70be32a