Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2022-25774

XSS in Notifications via saving Dashboards

Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Acquia
Products
Mautic
CVE-2022-25769

Improper regex in htaccess file

ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Acquia Mautic
Products
Mautic Mautic