Checkmk <2.0.0p19 Fixed in 2.0.0p20 and Checkmk <1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications.
Publication date: Thu, 24 Feb 2022 21:15:00 +0000