CVE-2021-27676
CVE-2021-27676
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration > Notifications > Hosts page.
CVSS 5.4 · Medium · EPSS 0.6% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: < 20.10.7
Update to 20.10.7