Lucene search
Veracode Vulnerability DatabaseVERACODE:29049HistoryJan 20, 2021 - 6:06 p.m.
Information DIsclosure
2021-01-2018:06:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
51.5%
mautic/core is vulnerable to information disclosure. The vulnerability exists as the tracking cookies per contact is systematically incremented by their auto-incremented ID, and it is possible to retrieve information about the contact through forms by progressive profiling.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mautic/core | le | 2.12.2 | |
| mautic/core | le | 2.12.2 |
Related
openvas
openvas
Mautic 2.12 Information Disclosure Vulnerability
2018-04-19 00:00:00
osv
osv
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
2021-01-19 21:16:21
CVE-2018-10189
2018-04-17 20:29:00
nvd
nvd
CVE-2018-10189
2018-04-17 20:29:00
cvelist
cvelist
CVE-2018-10189
2022-10-03 16:22:15
github
github
cve
cve
CVE-2018-10189
2022-10-03 16:22:15
prion
prion
Design/Logic Flaw
2018-04-17 20:29:00