High · 8.1 CVE-2017-1000489 EUVD-2021-0495GHSA-6x98-fx9j-7c78

Disabled users able to log in with third party SSO plugin

Published Jan 3, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address

Ecosystem	Package	Affected	Fixed	Record
Packagist	mautic/core	>= 2.0.0, < 2.12.0	2.12.0	GHSA-6x98-fx9j-7c78