Licenses: Updated the list of licenses and added a PDF containing all license texts
[check_mk.git] / .werks / 1052
blob448b622a41e61dc995674067ce39c95217ee61e3
1 Title: index start URL can not be used to redirect to absolute URLs anymore
2 Level: 1
3 Component: multisite
4 Class: security
5 State: unknown
6 Version: 1.2.5i5
7 Date: 1404480323
9 An attacker could make a user open up an URL to a compromised website which the
10 does not want to open index.py?start_url=http://(url to compromised URL).