3 matches found
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the Reporting API. An attacker can gain unauthorized access to sensitive report data by exploiting the flawed HTTP Basic Authentication implementation. Note: This is only exploitable if the API is enabled and...
7.7CVSS7AI score0.00711EPSS
SaveExploits0References2
Mautic allows Improper Authorization in Reporting API
Summary This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any...
7.7CVSS7.4AI score0.00711EPSS
SaveExploits0References6Affected Software1
20