CVE-2024-33853

CRITICAL 9.1CVE-2024-33853 · Published 23/08/2024 · updated 17/06/2026

In short

CVE-2024-33853 is a CRITICAL (CVSS 9.1) vulnerability affecting centreon web (centreon).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.0% of all vulnerabilities.
Fix: update to 22.10.23, 23.04.19, 23.10.13, 24.04.3 or later.

Package	Affected versions	Patched versions
centreon web centreon	`≥ 22.10.0, < 22.10.23≥ 23.04.0, < 23.04.19≥ 23.10.0, < 23.10.13≥ 24.04.0, < 24.04.3`	`22.10.2323.04.1923.10.1324.04.3`

Description

A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

References

centreon/centreon release · Release Notes
thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3744 · Vendor Advisory

More vulnerabilities in centreon web

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

centreon web

centreon

≥ 22.10.0, < 22.10.23≥ 23.04.0, < 23.04.19≥ 23.10.0, < 23.10.13≥ 24.04.0, < 24.04.3

22.10.2323.04.1923.10.1324.04.3

More vulnerabilities in centreon web

See all →