SQL Injection Vulnerability in Centreon Monitoring Event Logs

CVE-2025-6791

What is CVE-2025-6791?

A vulnerability exists within Centreon's Monitoring Event Logs module that allows an attacker to inject malicious SQL commands through manipulated HTTP requests. This flaw results in improper handling of special elements used in SQL commands, leading to unauthorized database access and potential data compromise. Affected versions include Centreon Web 24.10.0 to 24.10.8, 24.04.0 to 24.04.15, and 23.10.0 to 23.10.25.

References