Skip to content
OpenAdvisories
High · 8.8 CVE-2022-40043 EUVD-2022-6653GHSA-25gv-wg6f-6frp

Centreon SQL Injection vulnerability via esc_name parameter

Published Sep 26, 2022 · Updated May 21, 2025 · Assigned by mitre

Package: centreon/centreon Ecosystem: Packagist

Description

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist centreon/centreon < 21.04.16 21.04.16 GHSA-25gv-wg6f-6frp
Packagist centreon/centreon >= 21.10.0, < 21.10.8 21.10.8 GHSA-25gv-wg6f-6frp
Packagist centreon/centreon >= 22.0.0, < 22.04.2 22.04.2 GHSA-25gv-wg6f-6frp

References