Changelog
凡例: A - API, F - Frontend, G - Agent, J - Java gateway, P - Proxy, S - Server, T - Template
修正ID | Ver. | 修正内容 | |||||||
---|---|---|---|---|---|---|---|---|---|
ZBX-13262 | 2.2.21 | F | fixed cookie http-only attribute to prevent XSS attacks | ||||||
ZBX-13261 | 2.2.21 | F | fixed reflected XSS vulnerability in popup forms | ||||||
ZBX-13190 | 2.2.21 | F | fixed check for permissions to enable/disable actions | ||||||
ZBX-13181 | 2.2.21 | F | fixed database configuration error reporting and message filtering when messages are received from clear_messages function | ||||||
ZBX-13133 | 2.2.21 | F | fixed multiple security issues | ||||||
ZBX-13044 | 2.2.21 | F | fixed undefined index when setting strict-transport-security http header | ||||||
ZBX-13024 | 2.2.21 | F | fixed missed url search part in request login parameter | ||||||
ZBX-13024 | 2.2.21 | F | fixed parsing "request" parameter for URLs without input parameters | ||||||
ZBX-12854 | 2.2.21 | P | S | fixed crash of VMware collector with DebugLevel=4 | |||||
ZBX-12825 | 2.2.21 | F | implemented URL validation as optional; improved URL validation |