CNNVD-202512-3988 Information
CNNVD ID
CNNVD-202512-3988
Related CVE
- CNNVD Published: 2025-12-22
Description (Chinese)
Centreon是法国Centreon公司的一套开源的系统监控工具 。该产品主要提供对网络、系统和应用程序等资源的监控功能。 Centreon 24.10.0版本至24.10.5之前版本、24.04.0版本至24.04.5之前版本和23.10.0版本至23.10.4之前版本存在安全漏洞,该漏洞源于SQL命令中特殊元素中和不当,可能导致SQL注入攻击。
Description (English)
Centreon is an open-source system monitoring tool for Centreon in France. The product mainly provides a monitoring function for resources such as networks, systems and applications. There is a security loophole in the Centreon 24.10.0 to 24.10.5, 24.04.0 to 24.04.5 and 23.10.0 to 23.10.4, which stems from the incompetence of particular elements in the SQL order and may result in an SQL injection attack.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
Centreon
Published
2025-12-22
Last Modified
2026-02-24
References
https://github.com/centreon/centreon/releases https://access.redhat.com/security/cve/cve-2025-12514
Patch
https://github.com/centreon/centreon/releases
Share on: