Branch: refs/heads/2.0.0
Home:
https://github.com/tribe29/checkmk
Commit: 7893a774ffb5bb611dd507cac952a0d76849eaa2
https://github.com/tribe29/checkmk/commit/7893a774ffb5bb611dd507cac952a0d76…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2021-07-26 (Mon, 26 Jul 2021)
Changed paths:
A .werks/13066
M cmk/gui/inventory.py
M cmk/gui/plugins/views/inventory.py
Log Message:
-----------
13066 SEC Fix path traversal vulnerability
An authenticated user was able to enumerate the filesystem, accessible to the siteuser. No
file contents were disclosed.
CMK-7138
Change-Id: I8a2ca0801e148cbb703922c0efbf2c19c70be32a