Description
There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | centreon/centreon | 3.4.6 | — | GHSA-c8qc-cp8v-prpx |
| Packagist | centreon/centreon | >= 2.8.23, < 2.8.24 | 2.8.24 | GHSA-c8qc-cp8v-prpx |