Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-25770

Date: September 18, 2024

Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.

Language: PHP

Severity Score

Related Resources (6)

https://github.com/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc
https://github.com/mautic/mautic/commit/aee7bfb7510a83acf178a7f02da9661c040e9abf
https://nvd.nist.gov/vuln/detail/CVE-2022-25770
https://github.com/mautic/mautic
https://github.com/mautic/mautic/commit/73b18e9a434a28e528fe0e3d03620e7367bdcdca
https://www.mend.io/vulnerability-database/CVE-2022-25770

Severity Score

Weakness Type (CWE)

Missing Authentication for Critical Function

CWE-306

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us