Security Advisory

CVE-2022-40044

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-26 15:38:18
Last updated 2025-05-21 15:15:21
Assigner mitre
State PUBLISHED

Description

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.