Centreon Web Blind SQL Injection Vulnerability in Service Dependencies Deletion

A blind SQL injection vulnerability has been identified in the Centreon Web application running on Central Server on Linux, specifically within the Service Dependencies module. This vulnerability arises from unsanitized array keys during the deletion of service dependencies, allowing for manipulation of SQL queries. The issue affects Centreon Web on Central Server versions prior to 25.10.8, as well as 24.10.20 and 24.04.24.

Impact

Exploitation of this vulnerability allows for blind SQL injection, where an attacker can manipulate SQL queries and potentially access or modify database information without being able to see the results of their queries directly.