CVE-2024-55573

published 2025-01-23

CVE-2024-55573: An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with…

Priority P3 41 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL into the form used to create virtual metrics.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
centreon	centreon_web	>= 23.04.0 < 23.04.24	23.04.24
centreon	centreon_web	>= 23.10.0 < 23.10.19	23.10.19
centreon	centreon_web	>= 24.04.0 < 24.04.9	24.04.9
centreon	centreon_web	>= 24.10.0 < 24.10.3	24.10.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89