Lucene search
GitHub Advisory DatabaseGHSA-QJX3-2G35-6HV8HistoryApr 12, 2024 - 5:28 p.m.
Mautic Sensitive Data Exposure due to inadequate user permission settings
2024-04-1217:28:52
CWE-280
GitHub Advisory Database
github.com
10
mautic
sensitive data exposure
user permission settings
application
access
sensitive data
names
surnames
company names
stage names
patches
update
workarounds
owasp
software
Impact
Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing.
Users could potentially access sensitive data such as names and surnames, company names and stage names.
Patches
Update to 4.4.12 and 5.0.4
Workarounds
No
References
https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure
Affected configurations
Node
mauticmauticRange<5.0.4
ORmauticmauticRange1.0.2≥
ORmauticmauticRange<4.4.12
| CPE | Name | Operator | Version |
|---|---|---|---|
| mautic/core | lt | 5.0.4 | |
| mautic/core | ge | 1.0.2 | |
| mautic/core | lt | 4.4.12 |
Related
veracode
veracode
Sensitive Information Disclosure
2024-04-15 12:11:05
osv
osv
Mautic Sensitive Data Exposure due to inadequate user permission settings
2024-04-12 17:28:52