Skip to content
OpenAdvisories
High · 7.2 CVE-2025-12514 EUVD-2025-204709GHSA-fwr9-mwqr-4wq5

A user with elevated privileges is able to introduce a SQL Injection using the Open-tickets Notification rules configuration parameters

Published Dec 22, 2025 · Updated Jan 5, 2026 · Assigned by Centreon

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring - Open-tickets (Notification rules configuration parameters, Open tickets modules) allows

SQL Injection to user with elevated privileges.This issue affects Infra Monitoring - Open-tickets: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.5, from 23.10.0 before 23.10.4.

Affected products

VendorProductAffectedFixed
Centreon Infra Monitoring - Open-tickets 24.10.0 – < 24.10.5, 24.04.0 – < 24.04.5, 23.10.0 – < 23.10.4 24.10.5

References