Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/centreon/centreon@18.10.0
purl pkg:composer/centreon/centreon@18.10.0
Next non-vulnerable version 18.10.6
Latest non-vulnerable version 22.10.15
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3zzf-hf31-c3ed
Aliases:
CVE-2020-10945
GHSA-h5qv-p378-3hhr
Information Exposure Centreon exposes Session IDs in server responses.
18.10.11
Affected by 0 other vulnerabilities.
19.4.10
Affected by 0 other vulnerabilities.
19.10.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-4bh1-cyu7-6uam Centreon allows SQL Injection via the `main.php` `searchH` parameter. CVE-2018-19271
GHSA-79hg-357g-rrgv
VCID-6asm-nwp7-4fgk Cross-site Scripting Centreon is vulnerable to XSS via the resource name or macro expression of a poller macro. CVE-2018-19280
GHSA-7g3c-hrc6-5v4j
VCID-b675-z44g-byfs Centreon allows SQL Injection via the `searchVM` parameter. CVE-2018-19312
GHSA-5jxp-4x68-mhqc
VCID-fq3k-tpny-f3b1 Cross-site Scripting Centreon allows XSS via the Service field to the URI. CVE-2018-19311
GHSA-8vh5-j6xj-5953
VCID-kukg-nxwy-xyhb Centreon allows SNMP trap SQL Injection. CVE-2018-19281
GHSA-w2xf-4gg9-87wr