CVE-2025-4648
The content of a SVG file, received as input
in Centreon web, was not properly checked. Allows Reflected XSS. A user with elevated privileges can inject JS script by altering the content of a SVG media, during the submit request. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29.
| Software | From | Fixed in |
|---|---|---|
| centreon / centreon_web | 22.10.0 | 22.10.29 |
| centreon / centreon_web | 23.04.0 | 23.04.27 |
| centreon / centreon_web | 23.10.0 | 23.10.22 |
| centreon / centreon_web | 24.04.0 | 24.04.11 |
| centreon / centreon_web | 24.10.0 | 24.10.5 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime