critical9.1
CVE-2024-53923
An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24.
Impact
An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to achieve SQL injection in the form to upload media.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centreon | Centreon Web | from 23.04.0 before 23.04.24 from 23.10.0 before 23.10.19 from 24.04.0 before 24.04.9 from 24.10.0 before 24.10.3 |