CVE-2024-45754

Name of the Vulnerable Software and Affected Versions: Centreon BI Server versions 24.04.x through 24.04.2 Centreon BI Server versions 23.10.x through 23.10.7 Centreon BI Server versions 23.04.x through 23.04.10 Centreon BI Server versions 22.10.x through 22.10.10

Description: An issue was discovered in the centreon-bi-server component, allowing SQL injection to occur in the listing of configured reporting jobs. This can be exploited by authenticated users with high-privileged access.

Recommendations: For Centreon BI Server versions 24.04.x through 24.04.2, update to version 24.04.3 or later. For Centreon BI Server versions 23.10.x through 23.10.7, update to version 23.10.8 or later. For Centreon BI Server versions 23.04.x through 23.04.10, update to version 23.04.11 or later. For Centreon BI Server versions 22.10.x through 22.10.10, update to version 22.10.11 or later.