CVE-2020-13627

Name of the Vulnerable Software and Affected Versions Centreon host-monitoring widget versions prior to 1.6.4 Centreon host-monitoring widget versions prior to 18.10.3 Centreon host-monitoring widget versions prior to 19.04.3 Centreon host-monitoring widget versions prior to 19.0.1 Centreon service-monitoring widget versions prior to 1.6.4 Centreon service-monitoring widget versions prior to 18.10.5 Centreon service-monitoring widget versions prior to 19.04.3 Centreon service-monitoring widget versions prior to 19.10.2 Centreon tactical-overview widget versions prior to 1.0.3 Centreon tactical-overview widget versions prior to 18.10.1 Centreon tactical-overview widget versions prior to 19.04.1 Centreon tactical-overview widget versions prior to 19.10.1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php.

Recommendations For Centreon host-monitoring widget versions prior to 1.6.4, update to version 1.6.4 or later. For Centreon host-monitoring widget versions prior to 18.10.3, update to version 18.10.3 or later. For Centreon host-monitoring widget versions prior to 19.04.3, update to version 19.04.3 or later. For Centreon host-monitoring widget versions prior to 19.0.1, update to version 19.0.1 or later. For Centreon service-monitoring widget versions prior to 1.6.4, update to version 1.6.4 or later. For Centreon service-monitoring widget versions prior to 18.10.5, update to version 18.10.5 or later. For Centreon service-monitoring widget versions prior to 19.04.3, update to version 19.04.3 or later. For Centreon service-monitoring widget versions prior to 19.10.2, update to version 19.10.2 or later. For Centreon tactical-overview widget versions prior to 1.0.3, update to version 1.0.3 or later. For Centreon tactical-overview widget versions prior to 18.10.1, update to version 18.10.1 or later. For Centreon tactical-overview widget versions prior to 19.04.1, update to version 19.04.1 or later. For Centreon tactical-overview widget versions prior to 19.10.1, update to version 19.10.1 or later.