CVE-2021-28053: SQL Injection

Published Jul 16, 2021

Updated

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters.

Affected Software

1 affected component

Centreon Centreon=20.10.0

Event History

Jul 16, 2021

CVE Published

via MITRE·03:07 PM

Data Sourced

via MITRE·03:07 PM

Description

Frequently Asked Questions

What is CVE-2021-28053?

CVE-2021-28053 is a SQL injection vulnerability in Centreon-Web in Centreon Platform 20.10.0.

How does CVE-2021-28053 affect Centreon Platform 20.10.0?

CVE-2021-28053 allows remote authenticated users to execute arbitrary SQL commands through the Additional Information parameters in "Configuration > Users > Contacts / Users".

What is the severity of CVE-2021-28053?

CVE-2021-28053 has a severity score of 8.8, which is considered high.

How can I fix CVE-2021-28053?

To fix CVE-2021-28053, update Centreon Platform to version 20.04.13 or newer.

Where can I find more information about CVE-2021-28053?

You can find more information about CVE-2021-28053 in the Centreon documentation.