CVEvulnerability

CVE-2024-45757

7.2 HIGH Published 2024-12-03 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2024-12-03
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-89

Description

An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. SQL injection can occur in the user-settings form. Exploitation is only accessible to authenticated users with high-privileged access.

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References

https://github.com/centreon/centreon/releases github.com
https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-45757-centreon-bam-high-severity-4123?tid=4123 thewatch.centreon.com

CVE-2024-45757

Description

Related

Weakness · CWE (1)

References