CVE-2022-3276

CVE-2022-3276 is a command injection vulnerability in the puppetlabs-mysql module prior to version 13.0.0, affecting Puppet and Puppet Enterprise. It carries a high CVSS score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. Exploitation requires an attacker to provide unsanitized input, a condition rare in typical deployments. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.