Puppetlabs-mysql vulnerabilities

2 known vulnerabilities in Puppetlabs-mysql from Puppet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  puppetlabs-mysql: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-3276Oct 7, 2022PuppetEPSS 1.69%

  Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet

• 9.8 Critical severity

  puppetlabs-apt: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-3275Oct 7, 2022PuppetEPSS 2.37%

  Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet an