CVE-2019-17642

Centreon prior to versions 18.10.8, 19.10.1, and 19.04.2 is affected by a CSRF vulnerability that permits remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/views/scan/ajax/call.php within the Autodiscovery plugin. The issue arises from insufficient CSRF ...