CVE-2018-19280

Description

Centreon 3.4.x (fixed in Centreon 18.10.0) has XSS via the resource name or macro expression of a poller macro.

Affected packages (1)

• Packagist/centreon/centreon>= 3.4.0, < 18.10.0

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-19280
• PATCHhttps://github.com/centreon/centreon-archived
• WEBhttps://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html
• WEBhttps://github.com/centreon/centreon-archived/pull/6626