Volerion logoVolerion
Volerion logoVolerion

Centreon Web SQL Injection Vulnerability in All Versions

Vulnerability

A SQL injection vulnerability has been identified in Centreon Web, affecting all versions prior to 24.10.9, 24.04.16, and 23.10.26. This vulnerability allows users with high privileges to manipulate SQL queries through the Meta Service indicator page, due to improper handling of special characters in SQL commands.

Impact

Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized data access or manipulation within the application's database.

Remediation

Users are advised to update to Centreon Web versions 24.10.9, 24.04.16, or 23.10.26, all of which include cumulative fixes from prior updates.

Added: Aug 22, 2025, 7:23 PM
Updated: Aug 22, 2025, 7:23 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
2.5
exploitability
4.8
remediation
7.7
relevance
0.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.