Authentication Token Exposure in Centurion ERP by Nofuss Computing
CVE-2025-58156
What is CVE-2025-58156?
Centurion ERP, a product focused on IT service management and automation, has a vulnerability that allows authenticated users to access sensitive authentication token details stored in its database. While the actual tokens remain hashed, this exposure could potentially lead to security risks if not addressed. Users are strongly urged to remove all authentication tokens created in affected versions (1.12.0 through 1.20.9) and upgrade to version 1.21.0, which includes a fix for this issue. Disabling token authentication is not a viable workaround. For the utmost security, webmasters should ensure that these tokens are completely eliminated from the database.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
centurion_erp >= 1.12.0, < 1.21.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
