GHSA-j5wx-jvw3-j363
Centreon vulnerable to SQL Injection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | centreon/centreon | < 22.10.0-beta1 | 22.10.0-beta1 |
Details
As written in the advisory (Markdown source, shown as plain text).
A SQL injection vulnerability in Centreon affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. Version 22.10.0-beta1 contains a patch for this issue.
References
External links from the advisory. They lead to third-party sites.