CVE-2021-28053

2021-07-1615:07:26

mitre

www.cve.org

centeron-web

sql injection

remote authenticated users

AI Score

9.1

Confidence

High

EPSS

0.003

Percentile

68.7%

JSON

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in “Configuration > Users > Contacts / Users” allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters.