Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| centreon/centreon(Packagist) | 0 | 19.04.15 | N/A |
CVSS Metrics
