VDB
Sign up
MEDIUM6.1

GHSA-7g3c-hrc6-5v4j

Centreon XSS Vulnerability

Quick fix

GHSA-7g3c-hrc6-5v4j — centreon/centreon: upgrade to the fixed version with the command below.

composer require centreon/centreon:^18.10.0

Details

Centreon 3.4.x (fixed in Centreon 18.10.0) has XSS via the resource name or macro expression of a poller macro.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/centreon/centreon
Introduced in: 3.4.0Fixed in: 18.10.0
Fixcomposer require centreon/centreon:^18.10.0

References