CVE-2020-13252
Command Injection in Centreon
Résumé
Command Injection in Centreon
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
centreon/centreon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.04.15"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web engindemirbilek.github.io
- web github.com
- web github.com