CVE-2021-27676: Cross-site scripting in Centreon
Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The depdescription (Dependency Description) and depname (Dependency Name) parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration > Notifications > Hosts page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 20.10.7
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2021-27676.
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a CVSS score of 5.4.
How does this vulnerability affect Centreon?
This vulnerability affects Centreon version 20.10.2.
What is the vulnerability type of this vulnerability?
This vulnerability is a cross-site scripting (XSS) vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, update Centreon to a version that is not affected by the vulnerability.