Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-3827

Date: November 1, 2022

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is 293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier assigned to this vulnerability.

Language: PHP

Severity Score

Related Resources (6)

https://github.com/centreon/centreon/pull/11869
https://github.com/centreon/centreon
https://github.com/centreon/centreon/commit/293b10628f7d9f83c6c82c78cf637cbe9b907369
https://nvd.nist.gov/vuln/detail/CVE-2022-3827
https://vuldb.com/?id.212794
https://www.mend.io/vulnerability-database/CVE-2022-3827

Severity Score

Weakness Type (CWE)

Improper Neutralization

CWE-707

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-74

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-89

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

Do you need more information?

Contact Us