Vulnerabilities

SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.

SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.

SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session.

ImpactThe attacker can validate if a user exists by checking the time login returns.

SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available.

SummaryUsers with webhook permissions can conduct SSRF via webhooks.

ImpactThis is an information disclosure vulnerability originating from PHP's base image.

SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint.

SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality.

SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality.

SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser.

SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines.

This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3.

This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation.

This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.

Mautic allows you to update the application via an upgrade script.

When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.

Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.

With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed.

The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks.

Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.

Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing.

Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle.