Packagist/centreon/centreon CVE-2021-28055: medium 6.5, EPSS 0.82%
Predictable CSRF tokens in centreon/centreon
Action: Upgrade centreon/centreon to 2.8.37 or later.
composer require centreon/centreon:20.10.7composer require centreon/centreon:20.04.13composer require centreon/centreon:19.10.23composer require centreon/centreon:2.8.37Affected
| introduced | fixed | last affected |
|---|---|---|
| 20.10.0 | 20.10.7 | - |
| 20.04.0 | 20.04.13 | - |
| 19.10.0 | 19.10.23 | - |
| 0 | 2.8.37 | - |
Fixed versions
| 20.10.7 | 20.04.13 | 19.10.23 | 2.8.37 |
Sources
- osv: GHSA-7rg4-266c-jqw6
- https://nvd.nist.gov/vuln/detail/CVE-2021-28055
- https://github.com/centreon/centreon/pull/9612
- https://github.com/centreon/centreon/commit/0261d4b250135eb513fdb7d52ba6fdeb19c6863f
- https://github.com/centreon/centreon/commit/626d3fb91cef402df0ebda5a8165d8f45da67c7a
- https://github.com/centreon/centreon
- https://github.com/centreon/centreon/releases/tag/19.10.23
- https://github.com/centreon/centreon/releases/tag/2.8.37
CVE-2021-28055 · published · modified · JSON