GHSA-8vh5-j6xj-5953

ghsaUSosv

Centreon XSS Vulnerability

view advisory published 2022-05-14Licence: CC-BY-4.0

Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the `main.php?p=20201` URI, as demonstrated by the "Monitoring > Status Details > Services" screen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-19311US	medium5.4	1.16% (67th)	—	2018-11-16
Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen.

references

External citations — patches, advisories, analysis.

http://www.roothc.com.br/1349-2WEB
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.htmlWEB
https://github.com/centreon/centreon-archived/pull/6632WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-19311ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan