There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| centreon/centreon(Packagist) | N/A | N/A | N/A |
| centreon/centreon(Packagist) | 2.8.23 | 2.8.24 | N/A |
CVSS Metrics