Mautic: MST-48 Server-Side Request Forgery in Asset section

Impact

Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.

Patches

Update to 4.4.12 or 5.0.4

Workarounds

None

References

• https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_(SSRF)/

If you have any questions or comments about this advisory:

Email us at [email protected]