Skip to content
OpenAdvisories
Critical · 9.4 CVE-2024-35307 EUVD-2024-35278GHSA-9hrm-r87r-gq63

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension

Published Jun 10, 2024 · Updated Aug 2, 2024 · Assigned by PandoraFMS

Description

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through <777.

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 700 – < 777 777

References