CVE-2022-3827

centreon Contact Groups Form formContactGroup.php sql injection

6.3 MediumFix available

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is 293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier assigned to this vulnerability.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

1.02%Up 0.1 points since Nov 3, 2022

What each source reports

CVE List Score used 6.3

centreon Contact Groups Form formContactGroup.php sql injection

Record: CVE-2022-3827
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-707
Updated: 2026-11-02

EUVDEUVD-2022-7370 6.3

Record: EUVD-2022-7370
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-j5wx-jvw3-j363 9.8

Centreon vulnerable to SQL Injection

A SQL injection vulnerability in Centreon affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. Version 22.10.0-beta1 contains a patch for this issue.

Record: GHSA-j5wx-jvw3-j363
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-89
Updated: 2026-11-02

NVD 6.3

Record: CVE-2022-3827
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-707
Updated: 2026-11-02

OSV 6.3

centreon Contact Groups Form formContactGroup.php sql injection

Record: CVE-2022-3827
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-707
Updated: 2026-11-02

OSVGHSA-j5wx-jvw3-j363 9.8

Centreon vulnerable to SQL Injection

Record: GHSA-j5wx-jvw3-j363
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-89
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`centreon/centreon` Packagist	before 22.10.0-beta1	22.10.0-beta1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-3827 is a medium vulnerability (CVSS 6.3) in Centreon, published November 2, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.02%, the 63rd percentile. Fixed in centreon/centreon 22.10.0-beta1.