CVE-2018-19271
CVE-2018-19271
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter.
CVSS 8.8 · High · EPSS 2.1% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: ≥ 18.0.0, < 18.10.0
Update to 18.10.0
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: < 2.8.28
Update to 2.8.28
Original sources
- http://www.rootlabs.com.br/authenticated-sql-injection-in-centreon-3-4-x/
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html
- https://github.com/centreon/centreon/pull/6625
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.28.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-19271