Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-rv5q-72p2-2q24: Centreon contains cross-site scripting vulnerability via esc_name parameter

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches.

ghsa
#xss#vulnerability#web

Package

composer centreon/centreon (Composer)

Affected versions

< 21.04.16

>= 21.10.0, < 21.10.8

>= 22.0.0, < 22.04.1

Patched versions

21.04.16

21.10.8

22.04.1

Related news

CVE-2022-40044: Centreon SQLi and XSS Vulnerability

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.