Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-25773

Relative Path Traversal in assets file upload

Description

This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mautic mautic/core

Default version status: unaffected

  • < 5.2.3affected

References