Multiple vulnerabilities in Mautic



Risk Medium
Patch available YES
Number of vulnerabilities 4
CVE-ID CVE-2024-47053
CVE-2024-47051
CVE-2022-25773
CWE-ID CWE-285
CWE-22
CWE-94
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Mautic
Other software / Other software solutions

Vendor Mautic

Security Bulletin

This security bulletin contains information about 4 vulnerabilities.

1) Improper Authorization

EUVDB-ID: #VU104204

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-47053

CWE-ID: CWE-285 - Improper Authorization

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass authorization checks.

The vulnerability exists due to insufficient authorization controls in Reporting API. A remote user can gain access to sensitive information on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Mautic: 1.0.2 - 5.2.2

CPE2.3 External links

https://github.com/mautic/mautic/security/advisories/GHSA-8xv7-g2q3-fqgc


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Path traversal

EUVDB-ID: #VU104207

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: N/A

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in the upload validation process. A remote user can send a specially crafted HTTP request and delete arbitrary files on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Mautic: 1.0.0 - 5.2.2

CPE2.3 External links

https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Code Injection

EUVDB-ID: #VU104206

Risk: Medium

CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-47051

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation in Asset Uploads. A remote user can send a specially crafted request and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Mautic: 1.0.0 - 5.2.2

CPE2.3 External links

https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Path traversal

EUVDB-ID: #VU104205

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-25773

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in assets file upload. A remote user can send a specially crafted HTTP request and upload arbitrary files on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Mautic: 1.0.0 - 5.2.2

CPE2.3 External links

https://github.com/mautic/mautic/security/advisories/GHSA-4w2w-36vm-c8hf


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###