CVE-2020-13252: Centreon

High severity, CVSS 8.8. EPSS: 5.4% chance of exploitation in the next 30 days.

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.

Affected products

• Centreon Centreon: from 19.04.0, before 19.04.15 (fixed in 19.04.15)

Published 2020-05-21. Last modified 2026-06-17.