CVE-2025-3872
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-3872
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3872.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-3872
- Published
- 2025-04-24T10:15:17Z
- Modified
- 2025-04-29T14:49:55.438752Z
- Summary
- [none]
- Details
-
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection.
A user with high privileges is able to become administrator by intercepting the contact form request and altering its payload.
This issue affects Centreon: from 22.10.0 before 22.10.28, from 23.04.0 before 23.04.25, from 23.10.0 before 23.10.20, from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.
- References
Affected packages
Git / github.com/centreon/centreon
Affected versions
centreon-awie-22.*
centreon-awie-22.10.0
centreon-dsm-22.*
centreon-dsm-22.10.0
centreon-dsm-22.10.1
centreon-dsm-22.10.2
centreon-gorgone-22.*
centreon-gorgone-22.10.0
centreon-gorgone-22.10.1
centreon-gorgone-22.10.2
centreon-gorgone-22.10.3
centreon-gorgone-22.10.4
centreon-gorgone-22.10.5
centreon-gorgone-22.10.6
centreon-gorgone-22.10.7
centreon-gorgone-22.10.8
centreon-ha-22.*
centreon-ha-22.10.0
centreon-ha-22.10.1
centreon-open-tickets-22.*
centreon-open-tickets-22.10.0
centreon-open-tickets-22.10.1
centreon-open-tickets-22.10.2
centreon-open-tickets-22.10.3
centreon-open-tickets-22.10.4
centreon-open-tickets-22.10.5
centreon-web-22.*
centreon-web-22.10.10
centreon-web-22.10.11
centreon-web-22.10.12
centreon-web-22.10.13
centreon-web-22.10.14
centreon-web-22.10.15
centreon-web-22.10.16
centreon-web-22.10.17
centreon-web-22.10.18
centreon-web-22.10.19
centreon-web-22.10.2
centreon-web-22.10.20
centreon-web-22.10.21
centreon-web-22.10.22
centreon-web-22.10.23
centreon-web-22.10.24
centreon-web-22.10.25
centreon-web-22.10.26
centreon-web-22.10.27
centreon-web-22.10.3
centreon-web-22.10.4
centreon-web-22.10.5
centreon-web-22.10.6
centreon-web-22.10.7
centreon-web-22.10.8
centreon-web-22.10.9
centreon-widget-engine-status-22.*
centreon-widget-engine-status-22.10.0
centreon-widget-engine-status-22.10.1
centreon-widget-global-health-22.*
centreon-widget-global-health-22.10.0
centreon-widget-global-health-22.10.1
centreon-widget-graph-monitoring-22.*
centreon-widget-graph-monitoring-22.10.0
centreon-widget-graph-monitoring-22.10.1
centreon-widget-grid-map-22.*
centreon-widget-grid-map-22.10.0
centreon-widget-host-monitoring-22.*
centreon-widget-host-monitoring-22.10.0
centreon-widget-host-monitoring-22.10.1
centreon-widget-host-monitoring-22.10.2
centreon-widget-host-monitoring-22.10.3
centreon-widget-hostgroup-monitoring-22.*
centreon-widget-hostgroup-monitoring-22.10.0
centreon-widget-hostgroup-monitoring-22.10.1
centreon-widget-hostgroup-monitoring-22.10.2
centreon-widget-httploader-22.*
centreon-widget-httploader-22.10.0
centreon-widget-live-top10-cpu-usage-22.*
centreon-widget-live-top10-cpu-usage-22.10.0
centreon-widget-live-top10-cpu-usage-22.10.1
centreon-widget-live-top10-cpu-usage-22.10.2
centreon-widget-live-top10-memory-usage-22.*
centreon-widget-live-top10-memory-usage-22.10.0
centreon-widget-live-top10-memory-usage-22.10.1
centreon-widget-live-top10-memory-usage-22.10.2
centreon-widget-ntopng-listing-22.*
centreon-widget-ntopng-listing-22.10.0
centreon-widget-service-monitoring-22.*
centreon-widget-service-monitoring-22.10.0
centreon-widget-service-monitoring-22.10.2
centreon-widget-service-monitoring-22.10.3
centreon-widget-servicegroup-monitoring-22.*
centreon-widget-servicegroup-monitoring-22.10.0
centreon-widget-servicegroup-monitoring-22.10.1
centreon-widget-single-metric-22.*
centreon-widget-single-metric-22.10.0
centreon-widget-single-metric-22.10.1
centreon-widget-tactical-overview-22.*
centreon-widget-tactical-overview-22.10.0
centreon-widget-tactical-overview-22.10.1