CVE-2024-53923

published 2025-01-23

CVE-2024-53923: An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high…

Priority P3 42 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to achieve SQL injection in the form to upload media.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
centreon	centreon_web	>= 23.04.0 < 23.04.24	23.04.24
centreon	centreon_web	>= 23.10.0 < 23.10.19	23.10.19
centreon	centreon_web	>= 24.04.0 < 24.04.9	24.04.9
centreon	centreon_web	>= 24.10.0 < 24.10.3	24.10.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89