GHSA-wgjx-hm34-qgf7
SQL injection in Centreon
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | centreon/centreon | < 18.10.8 | 18.10.8 |
| Packagist | centreon/centreon | >= 19.0.0, < 19.04.5 | 19.04.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.
References
External links from the advisory. They lead to third-party sites.