Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5m7c-fmj7-wh99

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.

Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.

EPSS

Процентиль: 22%
0.00073
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 7 лет назад

Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.

EPSS

Процентиль: 22%
0.00073
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79