CVE-2020-13252
Command Injection in Centreon
概要
Command Injection in Centreon
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Packagist
centreon/centreon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.04.15"}]}]
参照URL
- advisory nvd.nist.gov
- web github.com
- web engindemirbilek.github.io
- web github.com
- web github.com