CVE-2022-40044
CVE-2022-40044
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
CVSS 5.4 · Medium · EPSS 0.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: < 21.04.16
Update to 21.04.16
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: ≥ 21.10.0, < 21.10.8
Update to 21.10.8
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: ≥ 22.0.0, < 22.04.1
Update to 22.04.1