CVE-2022-37773: Maarch Rm

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases.

Affected products

• Maarch Maarch Rm: from 2.7, before 2.8.6 (fixed in 2.8.6); version 2.9 only

Published 2022-11-23. Last modified 2026-07-09.