CVE-2018-10189

In Mautic 1.x and 2.x before 2.13.0, an attacker can systematically emulate tracking cookies per contact by manipulating the cookie value with +1, effectively allowing a third party to assume the tracked identity of other contacts and access information via forms using progressive profiling. This...