Packagist/mautic/core CVE-2022-25772: critical 9.6, EPSS 63.04%
Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
Action: Upgrade mautic/core to 4.3.0 or later.
composer require mautic/core:4.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.0 | - |
Fixed versions
| 4.3.0 |
Sources
- osv: GHSA-pjpc-87mp-4332
- https://github.com/mautic/mautic/security/advisories/GHSA-pjpc-87mp-4332
- https://nvd.nist.gov/vuln/detail/CVE-2022-25772
- https://github.com/mautic/mautic/commit/462eb596027fd949efbf9ac5cb2b376805e9d246
- https://github.com/mautic/mautic
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00847.html
CVE-2022-25772 · published · modified · JSON