Описание
Mautic: MST-48 Server-Side Request Forgery in Asset section
Impact
Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.
Patches
Update to 4.4.12 or 5.0.4
Workarounds
None
References
If you have any questions or comments about this advisory:
Email us at security@mautic.org
Пакеты
Наименование
mautic/core
composer
Затронутые версииВерсия исправления
>= 1.0.0-beta4, < 4.4.12
4.4.12
Наименование
mautic/core
composer
Затронутые версииВерсия исправления
>= 5.0.0-alpha, < 5.0.4
5.0.4
Связанные уязвимости
CVSS3: 6.5
nvd
больше 1 года назад
Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.