| Package | Affected versions | Patched versions |
|---|---|---|
| centreon | ≥ 18.0.0, < 18.10.8≥ 19.04.0, < 19.04.2≥ 19.10.0, < 19.10.1 | 18.10.819.04.219.10.1 |
An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/views/scan/ajax/call.php in the Autodiscovery plugin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free