CVE-2021-27676

Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration > Notifications > Hosts page.

• CWE-79

• https://github.com/centreon/centreon/pull/9587Patch, Third Party Advisory
• https://github.com/centreon/centreon/pull/9587Patch, Third Party Advisory

Published

May 26, 2021

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27665An unauthenticated remote user could exploit a potential int…7.5
• CVE-2021-27668HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the r…5.3
• CVE-2021-27670Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonpre…9.8
• CVE-2021-27671An issue was discovered in the comrak crate before 0.9.1 for…6.1
• CVE-2021-27672SQL Injection in the "admin_boxes.ajax.php" component of Tri…4.9
• CVE-2021-27673Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" com…4.8
• CVE-2021-27677Cross-site scripting (XSS) vulnerability in Galleries in Bat…5.4
• CVE-2021-27678Cross-site scripting (XSS) vulnerability in Snippets in Batf…5.4
• CVE-2021-27679Cross-site scripting (XSS) vulnerability in Navigation in Ba…5.4
• CVE-2021-27691Command Injection in Tenda G0 routers with firmware versions…9.8
• CVE-2021-27692Command Injection in Tenda G1 and G3 routers with firmware v…9.8
• CVE-2021-27693Server-side Request Forgery (SSRF) vulnerability in PublicCM…9.8