Description
Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mautic | Mautic | >= 1.0.0-beta4 – < < 4.4.12, > 5.0.0 – < < 5.0.4 | < 4.4.12 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | mautic/core | >= 1.0.0-beta4, < 4.4.12 | 4.4.12 | GHSA-mgv8-w49f-822w |
| Packagist | mautic/core | >= 5.0.0-alpha, < 5.0.4 | 5.0.4 | GHSA-mgv8-w49f-822w |