CVE-2024-33853: SQL Injection
A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33853?
CVE-2024-33853 is classified as a SQL Injection vulnerability, which can lead to unauthorized data access and potential data manipulation.
How do I fix CVE-2024-33853?
To mitigate CVE-2024-33853, upgrade Centreon Web to version 24.04.3 or later, 23.10.13 or later, 23.04.19 or later, or 22.10.23 or later.
What versions are affected by CVE-2024-33853?
CVE-2024-33853 affects Centreon Web versions prior to 24.04.3, 23.10.13, 23.04.19, and 22.10.23.
Is CVE-2024-33853 easy to exploit?
Yes, CVE-2024-33853 can be easily exploited by attackers with knowledge of SQL injection techniques.
What should I do if I cannot upgrade to fix CVE-2024-33853?
If you cannot upgrade, consider implementing web application firewalls and input validation to reduce the risk associated with CVE-2024-33853.