Centreon Infra Monitoring Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Centreon Infra Monitoring, specifically within the DSM extension configuration modules. This issue affects versions 25.10.0 prior to 25.10.1, 24.10.0 prior to 24.10.4, and 24.04.0 prior to 24.04.8. The vulnerability arises from improper input neutralization during web page generation, allowing users with elevated privileges to inject malicious scripts that are stored and executed later.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Users can upgrade to Centreon versions 25.10.1, 24.10.4, or 24.04.8 to address this vulnerability.