Description
Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pandora FMS | Pandora FMS | 777 | — |