7.2Hoch
CVE-2025-4650User with high privileges is able to introduce a SQLi using the Meta Service indicator page
Beschreibung
User with high privileges is able to introduce a SQLi using the Meta Service indicator page. Caused by an Improper Neutralization of Special Elements used in an SQL Command.This issue affects web: from 24.10.0 before 24.10.9, from 24.04.0 before 24.04.16, from 23.10.0 before 23.10.26.
Schwachstellentyp (CWE):
CWE-89
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| centreon | centreon web | 23.10.0 – < 23.10.26 | |
| Centreon | web | 24.10.0 – < 24.10.9, 24.04.0 – < 24.04.16, 23.10.0 – < 23.10.26 |
Referenzen und Patches
- https://github.com/centreon/centreon/releases release-notesRelease Notes
- https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-4650-centreon-web-all-versions-high-sever… vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*≥ 23.10.0 < 23.10.26cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*≥ 24.04.0 < 24.04.16cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*≥ 24.10.0 < 24.10.9