CVE-2020-13628 | BDVDB-2026-136397 Detail

Description#

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5, 19.04.3, 19.10.2 of the Centreon service-monitoring widget; and 1.0.3, 18.10.1, 19.04.1, 19.10.1 of the Centreon tactical-overview widget.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/

Exploit#

No public exploit known

History#

Version 12020-05-27Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.