CVE-2024-33854: SQL Injection
A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33854?
CVE-2024-33854 has a critical severity rating due to the potential for unauthorized database access.
How do I fix CVE-2024-33854?
To fix CVE-2024-33854, upgrade Centreon Web to the latest versions specified in the vulnerability description.
Which versions of Centreon Web are affected by CVE-2024-33854?
CVE-2024-33854 affects Centreon Web versions prior to 24.04.3, 23.10.13, 23.04.19, and 22.10.23.
What is SQL Injection in the context of CVE-2024-33854?
SQL Injection in CVE-2024-33854 refers to the vulnerability that allows attackers to manipulate SQL queries via user input to gain unauthorized access to data.
How can I prevent SQL Injection vulnerabilities like CVE-2024-33854 in the future?
Prevent SQL Injection by implementing parameterized queries, using ORM frameworks, and validating user inputs.