CVE-2024-45754

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-45754
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45754.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-45754
Published
2024-10-11T22:15:04Z
Modified
2024-10-15T18:48:37.154404Z
Summary
[none]
Details

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to authenticated users with high-privileged access.

References

Affected packages

Git / github.com/centreon/centreon

Affected ranges

Type
GIT
Repo
https://github.com/centreon/centreon
Events

Affected versions

centreon-awie-24.*

centreon-awie-24.04.0

centreon-dsm-24.*

centreon-dsm-24.04.0
centreon-dsm-24.04.2

centreon-gorgone-24.*

centreon-gorgone-24.04.0

centreon-ha-24.*

centreon-ha-24.04.0

centreon-open-tickets-24.*

centreon-open-tickets-24.04.0

centreon-web-24.*

centreon-web-24.04.0
centreon-web-24.04.2