CVE-2022-34871

CVE-2022-34871 is a SQL injection in Centreon’s poller resources. It requires authentication and allows an attacker to escalate privileges to administrator by abusing unsanitized user input used to build SQL queries. Root cause: lack of validation of a user-supplied string in poller configuration...