Description
SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | centreon/centreon | < 18.10.8 | 18.10.8 | GHSA-wgjx-hm34-qgf7 |
| Packagist | centreon/centreon | >= 19.0.0, < 19.04.5 | 19.04.5 | GHSA-wgjx-hm34-qgf7 |