What is GHSA-5jxp-4x68-mhqc?

GHSA-5jxp-4x68-mhqc is a security advisory published by GitHub Security Advisories with High severity. Centreon SQL Injection

Which CVE IDs does GHSA-5jxp-4x68-mhqc cover?

GHSA-5jxp-4x68-mhqc covers the following CVE IDs: CVE-2018-19312. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5jxp-4x68-mhqc?

GHSA-5jxp-4x68-mhqc has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-5jxp-4x68-mhqc?

GHSA-5jxp-4x68-mhqc affects 2 products, including: composer/centreon/centreon:\u003e= 18.0.0, \u003c 18.10.0; composer/centreon/centreon:\u003e= 2.8.0, \u003c 2.8.24.

GHSA-5jxp-4x68-mhqcHighCVSS 8.8

Centreon SQL Injection

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

September 15, 2023

🔗 CVE IDs covered (1)

CVE-2018-19312 →

📋 Description

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.

🎯 Affected products2

composer/centreon/centreon:>= 18.0.0, < 18.10.0
composer/centreon/centreon:>= 2.8.0, < 2.8.24

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2018-19312
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.24.html
http://www.roothc.com.br/1349-2/
https://github.com/centreon/centreon-archived/pull/6257
https://github.com/centreon/centreon-archived/pull/6628
https://github.com/advisories/GHSA-5jxp-4x68-mhqc