Cross-Site Scripting Vulnerability in Centreon Infra Monitoring

CVE-2025-8459

What is CVE-2025-8459?

A Cross-Site Scripting (XSS) vulnerability exists in Centreon Infra Monitoring that allows an attacker to store malicious scripts in the monitoring system. This vulnerability primarily affects the recurrent downtime scheduler modules. The affected versions include Infra Monitoring versions 24.10.0 up to 24.10.12, 24.04.0 up to 24.04.17, and 23.10.0 up to 23.10.27. When exploited, this vulnerability can lead to significant security risks, including unauthorized access and data breaches, making it essential for users to apply the necessary patches and upgrades to protect their infrastructure.

References