Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-25770

Insufficient authentication in upgrade flow

Description

Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mautic Mautic

Default version status: unaffected

  • >= 1.0.0-beta3 to < < 4.4.13affected
  • >= 5.0.0 to < < 5.1.1.affected

References