Vulnerability · Published Nov 2, 2022 · Assigned by VulDB

CVE-2022-3827centreon Contact Groups Form formContactGroup.php sql injection

Medium 6.3

In plain English

A medium-severity security flaw in centreon from unspecified. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)1.0%top 36.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is 293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier assigned to this vulnerability.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	centreon/centreon	22.10.0-beta1	GHSA-j5wx-jvw3-j363

Affected products (as reported)

Vendor	Product	Versions
unspecified	centreon	n/a

Weakness: CWE-707 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References