PT-2025-2997 · Centreon · Centreon Web

Spawnzii · Published 2025-01-23 · Updated 2025-06-06 · CVE-2024-53923

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Centreon Web versions 23.04.x through 23.04.23 Centreon Web versions 23.10.x through 23.10.18 Centreon Web versions 24.04.x through 24.04.8 Centreon Web versions 24.10.x through 24.10.2

Description A user with high privileges is able to achieve SQL injection in the form to upload media. This issue allows attackers with high privileges to exploit the media upload form by potentially injecting malicious SQL code.

Recommendations Centreon Web version 23.04.x: Update to version 23.04.24 or later. Centreon Web version 23.10.x: Update to version 23.10.19 or later. Centreon Web version 24.04.x: Update to version 24.04.9 or later. Centreon Web version 24.10.x: Update to version 24.10.3 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-08240

CVE-2024-53923

Affected Products

Centreon Web

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2024-53923 · Security Note
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-53923-centreon-web-critical-severity-4265 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-53923 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08240 · Security Note
• https://github.com/centreon/centreon/releases · Note
• https://twitter.com/TMJIntel/status/1884276500481843344 · Twitter Post
• https://twitter.com/fridaysecurity/status/1884055934328348701 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1882625240821280795 · Twitter Post
• https://t.me/cvedetector/16233 · Telegram Post
• https://twitter.com/TweetThreatNews/status/1884292988555211006 · Twitter Post
• https://twitter.com/Dinosn/status/1884104448911536429 · Twitter Post
• https://t.me/cvenotify/124930 · Telegram Post
• https://twitter.com/CveFindCom/status/1882556734192890367 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1884056987056705555 · Twitter Post
• https://t.me/pentestingnews/55752 · Telegram Post