Centreon Web 2.8.35

Security

• [Security]: XSS stored in widget name

• [Security]: Missing access control mechanism in rest API v1

• [Security]: Plain text password in Hosts, Hosts templates, Services and Services templates configuration menus

• [Security]: XSS in Contact groups configuration

• [Security]: XSS in Connectors command configuration menu