CVE-2022-42425

CVE-2022-42425 is a high-severity SQL injection vulnerability affecting Centreon, allowing authenticated remote attackers to escalate privileges. Specifically, it stems from improper validation of user input when modifying poller broker configurations, enabling an attacker to gain administrator-level access. With a CVSS score of 8.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, leading to high impact on confidentiality, integrity, and availability. While the vulnerability has a high EPSS and FAUCET Risk Score, there is currently no evidence of active exploitation, public exploit code, or significant community discussion.