Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Resync 12 06 #128

Merged
merged 2 commits into from
Dec 6, 2024
Merged

Resync 12 06 #128

merged 2 commits into from
Dec 6, 2024

Conversation

sc979
Copy link
Contributor

@sc979 sc979 commented Dec 6, 2024

Resync 12 06

@sc979 sc979 requested a review from a team as a code owner December 6, 2024 14:52
@sc979 sc979 merged commit f769c33 into develop Dec 6, 2024
11 of 12 checks passed
@sc979 sc979 deleted the MON-resync-12-06 branch December 6, 2024 14:52
@github-actions GitHub Actions
Copy link

github-actions bot commented Dec 6, 2024 •
edited
Loading

Logo
Checkmarx One – Scan Summary & Details – 7791fdb3-4ebf-4276-bc88-aff5f9334490

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Absolute_Path_Traversal /www/include/configuration/configObject/connector/connector.php: 48 Attack Vector
HIGH Absolute_Path_Traversal /www/include/home/customViews/rename.php: 74 Attack Vector
HIGH CVE-2021-3807 Npm-ansi-regex-2.1.1 Vulnerable Package
HIGH CVE-2021-43138 Npm-async-1.5.2 Vulnerable Package
HIGH CVE-2024-0637 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-21538 Npm-cross-spawn-5.1.0 Vulnerable Package
HIGH CVE-2024-21538 Npm-cross-spawn-7.0.3 Vulnerable Package
HIGH CVE-2024-23115 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-23116 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-23117 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-23118 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-23119 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-32501 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-33853 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-33854 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-39841 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-39842 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-40643 Npm-htmlparser2-3.10.1 Vulnerable Package
HIGH CVE-2024-45801 Npm-dompurify-2.4.0 Vulnerable Package
HIGH CVE-2024-47875 Npm-dompurify-2.4.0 Vulnerable Package
HIGH CVE-2024-48910 Npm-dompurify-2.4.0 Vulnerable Package
HIGH CVE-2024-51736 Php-symfony/process-v7.1.5 Vulnerable Package
HIGH CVE-2024-5723 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH CVE-2024-5725 Php-centreon/centreon-22.10.2 Vulnerable Package
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 348 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 348 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 348 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 320 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 320 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 320 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 293 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 293 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 293 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 375 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configGenerate/formGenerateFiles.php: 375 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/views/graphs/graphs.html: 298 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/eventLogs/viewLog.php: 802 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/eventLogs/viewLog.php: 766 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/configuration/configServers/formServers.php: 501 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/home/customViews/widgetParam.html: 106 Attack Vector
HIGH Client_DOM_Stored_XSS /www/include/common/javascript/centreon/notifier.js: 84 Attack Vector
HIGH Client_DOM_Stored_XSS /www/widgets/hostgroup-monitoring/data.js: 45 Attack Vector
HIGH Client_DOM_Stored_XSS /www/widgets/servicegroup-monitoring/data.js: 45 Attack Vector
HIGH Client_DOM_Stored_XSS /www/widgets/service-monitoring/data.js: 41 Attack Vector
HIGH Client_DOM_Stored_XSS /www/widgets/host-monitoring/data.js: 41 Attack Vector
HIGH Client_DOM_Stored_XSS /www/widgets/tactical-overview/src/data_js.js: 9 Attack Vector
HIGH Client_DOM_Stored_XSS /www/widgets/grid-map/src/data_js.js: 7 Attack Vector
HIGH Client_DOM_XSS /www/include/views/graphs/graphs.html: 435 Attack Vector
HIGH Client_DOM_XSS /www/front_src/src/route-components/legacyRoute/index.tsx: 84 Attack Vector
HIGH Cx89601373-08db Npm-debug-3.2.7 Vulnerable Package
HIGH Cx89601373-08db Npm-debug-2.6.9 Vulnerable Package
HIGH Cx8bc4df28-fcf5 Npm-debug-4.3.4 Vulnerable Package
HIGH Cx8bc4df28-fcf5 Npm-debug-4.3.7 Vulnerable Package
HIGH Cx8bc4df28-fcf5 Npm-debug-4.3.5 Vulnerable Package
HIGH Cx8bc4df28-fcf5 Npm-debug-2.6.9 Vulnerable Package
HIGH Cx8bc4df28-fcf5 Npm-debug-3.2.7 Vulnerable Package
HIGH Cxdca8e59f-8bfe Npm-inflight-1.0.6 Vulnerable Package
HIGH Deserialization_of_Untrusted_Data /src/CentreonRemote/Application/Clapi/CentreonWorker.php: 79 Attack Vector
HIGH Passwords And Secrets - Generic Password /services.yaml: 16 Query to find passwords and secrets in infrastructure code.
HIGH Passwords And Secrets - Generic Token /centreon-api.yaml: 245 Query to find passwords and secrets in infrastructure code.
HIGH Passwords And Secrets - Generic Token /centreon-api.yaml: 25 Query to find passwords and secrets in infrastructure code.
HIGH Passwords And Secrets - Generic Token /centreon-api.yaml: 119 Query to find passwords and secrets in infrastructure code.
HIGH Passwords And Secrets - Generic Token /centreon-api.yaml: 82 Query to find passwords and secrets in infrastructure code.
HIGH Reflected_XSS /www/include/monitoring/objectDetails/hostDetails.php: 92 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/objectDetails/hostDetails.php: 92 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 468 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 468 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/objectDetails/hostDetails.php: 87 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/objectDetails/hostDetails.php: 87 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 471 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 471 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 470 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 470 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 62 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 49 Attack Vector
HIGH Reflected_XSS /www/include/configuration/configObject/timeperiod/DB-Func.php: 455 Attack Vector
HIGH Reflected_XSS /www/include/configuration/configObject/timeperiod/DB-Func.php: 538 Attack Vector
HIGH Reflected_XSS /www/include/configuration/configObject/timeperiod/DB-Func.php: 598 Attack Vector
HIGH Reflected_XSS /www/class/centreonConfigCentreonBroker.php: 1674 Attack Vector
HIGH Reflected_XSS /www/include/configuration/configObject/host/DB-Func.php: 2937 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 61 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 60 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 59 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 58 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 71 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 70 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 69 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 68 Attack Vector
HIGH Reflected_XSS /www/main.get.php: 67 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 68 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 68 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 65 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 65 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 63 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 63 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 61 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 61 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 58 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 58 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 56 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 56 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 54 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 54 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 52 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 52 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 49 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 49 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 47 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 47 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 46 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 46 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 44 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 44 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 42 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 42 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 41 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 41 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 102 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 102 Attack Vector
HIGH Reflected_XSS /www/include/monitoring/status/Services/service.php: 99

More results are available on AST platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kduret kduret Awaiting requested review from kduret kduret is a code owner automatically assigned from centreon/owners-pipelines

@mushroomempires mushroomempires Awaiting requested review from mushroomempires mushroomempires is a code owner automatically assigned from centreon/owners-pipelines

Assignees
No one assigned
Labels
skip-workflow-awie
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@sc979