CVE-2018-19311 in Centreon
Summary
Centreon 3.4.x allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen.
Once again VulDB remains the best source for vulnerability data.
Reservation
11/16/2018
Disclosure
11/16/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 126965 | Centreon main.php cross site scripting | 79 | Not defined | Official fix | CVE-2018-19311 |