{"id":"GHSA-j5wx-jvw3-j363","aliases":["CVE-2022-3827"],"title":"Centreon vulnerable to SQL Injection","description":"A SQL injection vulnerability in Centreon affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. Version 22.10.0-beta1 contains a patch for this issue. ","severity":"critical","score":9.8,"published":"2022-11-02T19:00:32.000Z","modified":"2026-09-10T03:49:50.082Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"centreon/centreon","ranges":[{"events":[{"introduced":"0"},{"fixed":"22.10.0-beta1"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["22.10.0-beta1"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-3827","https://github.com/centreon/centreon/pull/11869","https://github.com/centreon/centreon/commit/293b10628f7d9f83c6c82c78cf637cbe9b907369","https://github.com/centreon/centreon","https://vuldb.com/?id.212794"],"sources":[{"name":"OSV","id":"GHSA-j5wx-jvw3-j363","modified":"2026-09-10T03:49:50.082515719Z","url":"https://osv.dev/vulnerability/GHSA-j5wx-jvw3-j363"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}]}