GitHub Advisoryadvisory · Packagist

GHSA-8vh5-j6xj-5953 Centreon XSS Vulnerability

MEDIUM Published 2022-05-14 Modified 2023-07-22 Official page ↗
Aliases
CVE-2018-19311
Ecosystem
Packagist
Packages
centreon/centreon
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2023-07-22

Affected packages

• Packagist centreon/centreon: >= 18.0.0, < 18.10.0 → fixed in 18.10.0

Description

Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the `main.php?p=20201` URI, as demonstrated by the "Monitoring > Status Details > Services" screen.

Related

Alias · CVE (1)

  • CVE-2018-19311 Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References