SQL Injection

2019-09-2603:21:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

54.7%

JSON

centreon/centreon is vulnerable to SQL injection. The sanitization of host_id and service_id parameters in include/monitoring/status/Services/xml/makeXMLForOneService.php were not done properly, allowing an attacker to inject malicious SQL command through those parameters.

CPENameOperatorVersion
centreon/centreonle19.10.0-beta.3
centreon/centreonle19.10.0-beta.3

CPE	Name	Operator	Version
	centreon/centreon	le	19.10.0-beta.3
	centreon/centreon	le	19.10.0-beta.3

References

github.com/advisories/GHSA-wgjx-hm34-qgf7

github.com/centreon/centreon/commit/7c5d53342b08232559050f983c6bd07c3b43e989

github.com/centreon/centreon/pull/7862

github.com/centreon/centreon/releases

0.002 Low

EPSS

Percentile

54.7%

JSON

Related for VERACODE:21576