Headline
GHSA-25gv-wg6f-6frp: Centreon SQL Injection vulnerability via esc_name parameter
Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches.
Package
composer centreon/centreon (Composer)
Affected versions
< 21.04.16
>= 21.10.0, < 21.10.8
>= 22.0.0, < 22.04.1
Patched versions
21.04.16
21.10.8
22.04.2