GHSA-r5mf-q76q-f2xq

ghsaUSosv

Cross-site scripting in Centreon

view advisory published 2021-06-08Licence: CC-BY-4.0

Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration > Notifications > Hosts page.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-27676US	medium5.4	0.62% (50th)	—	2021-05-26
Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulne…

references

External citations — patches, advisories, analysis.

http://centreon.comWEB
https://github.com/centreon/centreon/pull/9587WEB
https://github.com/centreon/centreon/releases/tag/20.10.7WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-27676ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan