CVE-2020-22345: Centreon

High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days.

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

Affected products

• Centreon Centreon: version 19.10.8 only

Published 2021-08-18. Last modified 2026-06-17.