Skip to content
OpenAdvisories

Package · Packagist

mautic/core-lib

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2022-25770

    Insufficient authentication in upgrade flow

    Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vul…

    Mautic Mautic mautic/core mautic/core-lib Packagist
  • High 7.3
    CVE-2021-27917

    XSS in contact tracking and page hits report

    Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.

    Mautic Mautic mautic/core mautic/core-lib Packagist
  • High 7.0
    CVE-2022-25768

    Improper Access Control in UI upgrade process

    The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or …

    Mautic Mautic mautic/core mautic/core-lib Packagist