CVE-2025-4647: A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon web allows Reflected XSS.
A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG.
This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4647?
CVE-2025-4647 is rated as a high severity vulnerability due to its potential for reflected cross-site scripting (XSS).
How does CVE-2025-4647 affect the Centreon web application?
CVE-2025-4647 allows a user with elevated privileges to bypass input sanitization, enabling them to modify existing SVG content maliciously.
How can I fix CVE-2025-4647?
To fix CVE-2025-4647, ensure that you upgrade to the latest version of Centreon web that addresses this vulnerability.
What versions of Centreon are affected by CVE-2025-4647?
CVE-2025-4647 affects Centreon web versions from 22.10.0 up to 24.10.5.
Who is vulnerable to CVE-2025-4647?
Users with elevated privileges on the Centreon web application are particularly vulnerable to CVE-2025-4647.