p PatchFirst

CVE-2018-19311

CVE-2018-19311

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen.

CVSS 5.4 · Medium · EPSS 1.2% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • centreon/centreon Packagist

    Affected ranges
    • ECOSYSTEM: ≥ 18.0.0, < 18.10.0

    Update to 18.10.0

Original sources

Check your server →