56 results · Feed
-
Medium 5.8
Mautic vulnerable to secret data exfiltration via symfony parameters
In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter syntax in any of the free text fields in Mautic’s configuration that are used in p…
-
Critical 9.6
Mautic is vulnerable to XSS vulnerability
A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different attack method than CVE-2020-35124, but also related to the Referer concept).
-
Critical —
XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic
A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.
-
Critical 9.0
Mautic stored Cross-site Scripting (XSS)
Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventu…
-
Critical 9.0
Mautic stored Cross-site Scripting (XSS)
Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow…
-
Medium 6.1
XSS vulnerability in company name field in Mautic
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field.
-
Medium 6.1
XSS vulnerability in Author URL of themes in Mautic
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.
-
Critical 9.8
CSV Injection vulnerability with exported contact lists in Mautic
Mautic before 2.13.0 allows CSV injection.
-
Medium 6.1
XSS vulnerability in theme config file in Mautic
Mautic before v2.13.0 has stored XSS via a theme config file.
-
High 7.5
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systema…
-
Medium 6.1
Mautic Cross Site Scripting (XSS) vulnerability
Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code.
-
High 8.1
Disabled users able to log in with third party SSO plugin
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
-
Medium 6.5
Mautic users able to download any files from server using filemanager
Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.
-
Medium 6.1
Inline JS XSS vulnerability in Mautic
Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form.
-
High 7.5
Sensitive Cookie Without HttpOnly and Secure Flag
Mautic 2.6.1 and earlier fails to set flags on session cookies
-
High 8.8
Mautic Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.