| Package | Affected versions | Patched versions |
|---|---|---|
| centreon web | ≥ 23.10.0, < 23.10.26≥ 24.04.0, < 24.04.16≥ 24.10.0, < 24.10.9 | 23.10.2624.04.1624.10.9 |
User with high privileges is able to introduce a SQLi using the Meta Service indicator page. Caused by an Improper Neutralization of Special Elements used in an SQL Command.This issue affects web: from 24.10.0 before 24.10.9, from 24.04.0 before 24.04.16, from 23.10.0 before 23.10.26.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free