CVE-2020-22345
CVE-2020-22345
This page contains facts from public vulnerability sources. Check the original advisory before updating.
/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.
CVSS 8.8 · High · EPSS 3.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
centreon/centreon Packagist
- Affected ranges
- ECOSYSTEM: < 20.04.0
Update to 20.04.0