CVE-2022-3276

8.8 highEPSS 1.7%

High (8.8) in puppet puppetlabs-mysql. EPSS 1.7% chance of exploitation in the next 30 days.

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-10-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

puppet:puppetlabs-mysql

References

https://puppet.com/security/cve/CVE-2022-3276
https://puppet.com/security/cve/CVE-2022-3276

Check your stack JSON