Packagist/mautic/core CVE-2022-25768: high 7, EPSS 0.29%
Mautic vulnerable to Improper Access Control in UI upgrade process
Action: Upgrade mautic/core to 4.4.13 or later.
composer require mautic/core:4.4.13composer require mautic/core:5.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.3 | 4.4.13 | - |
| 5.0.0-alpha | 5.1.1 | - |
Fixed versions
| 4.4.13 | 5.1.1 |
Sources
- osv: GHSA-x3jx-5w6m-q2fc#Packagist/mautic/core
- https://github.com/mautic/mautic/security/advisories/GHSA-x3jx-5w6m-q2fc
- https://nvd.nist.gov/vuln/detail/CVE-2022-25768
- https://github.com/mautic/mautic/commit/89f964d06f00688016b38a56dfd9e95fc676c7ce
- https://github.com/mautic/mautic/commit/925aeee7d3dbb6ca67f92d9dc5893d99250f739b
- https://github.com/mautic/mautic
CVE-2022-25768 · published · modified · JSON