CVE-2025-8460
A user with elevated privileges can inject XSS in the Notification rules configuration page
Résumé
A user with elevated privileges can inject XSS in the Notification rules configuration page
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Notification rules, Open tickets module)
allows Stored
XSS by users with elevated privileges.This issue affects Infra Monitoring: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.5, from 23.10.0 before 23.10.4.
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory thewatch.centreon.com