Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards.
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.