critical9.8
CVE-2022-3827
Centreon vulnerable to SQL Injection
Impact
A SQL injection vulnerability in Centreon affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. Version 22.10.0-beta1 contains a patch for this issue.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | centreon/centreon | < 22.10.0-beta1 | 22.10.0-beta1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centreon | Centreon | before 22.10.0 |