Lucene search

K
osvGoogleOSV:GHSA-7VVH-XQQ4-W777
HistoryMay 13, 2022 - 1:12 a.m.

Mautic Cross-Site Request Forgery (CSRF)

2022-05-1301:12:01
Google
osv.dev
2

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.4%

Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.

CPENameOperatorVersion
mautic/coreeq1.4.1

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.4%

Related for OSV:GHSA-7VVH-XQQ4-W777