CVE-2018-19312
CVE-2018-19312
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.
CVSS 8.8 · High · EPSS 1.9% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: ≥ 18.0.0, < 18.10.0
Update to 18.10.0
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: ≥ 2.8.0, < 2.8.24
Update to 2.8.24
Original sources
- https://github.com/centreon/centreon/pull/6257
- http://www.roothc.com.br/1349-2/
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.24.html
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html
- https://github.com/centreon/centreon/pull/6628
- https://nvd.nist.gov/vuln/detail/CVE-2018-19312