En resumen
- CVE-2022-40044 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a centreon/centreon, centreon (centreon).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.77%, mayor que el 55.6% de las vulnerabilidades.
- Solución: actualizar a 21.10.8, 22.04.1, 21.04.16 o posterior.
| Package | Affected versions | Patched versions |
|---|
| centreon/centreon Packagist | ≥ 21.10.0, < 21.10.8≥ 22.0.0, < 22.04.1< 21.04.16
| 21.10.822.04.121.04.16
|
| centreon | = 20.10.18
| No fix yet |
Description
Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches.
NVD description
Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Más vulnerabilidades de centreon/centreon
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free