Medium · 6.7 CVE-2024-39843 EUVD-2024-38264GHSA-4843-jw5m-c4mr

A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user…

Published Sep 23, 2024 · Updated Sep 23, 2024 · Assigned by mitre

Description

A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs.

References

https://github.com/centreon/centreon/releases
https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3809