Mautic Security Vulnerabilities and Issues — Mautic CVE List

Lucene search

AcquiaMautic

3 matches found

CVE•added 2018/01/03 4:29 p.m.•60 views

CVE-2017-1000488

Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2018/01/03 5:29 p.m.•58 views

CVE-2017-1000490

Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.

6.5CVSS6.4AI score0.00344EPSS

CVE•added 2018/01/03 5:29 p.m.•49 views

CVE-2017-1000489

Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address

8.1CVSS7.9AI score0.00271EPSS