CVE-2017-1000490
1 advisory.
Packagist/mautic/core CVE-2017-1000490: medium 6.5, EPSS 1.40%
Mautic users able to download any files from server using filemanager
Action: Upgrade mautic/core to 2.12.0 or later.
composer require mautic/core:2.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2.12.0 | - |
Fixed versions
| 2.12.0 |
Sources
- osv: GHSA-qpgw-2c72-4c89
- https://github.com/mautic/mautic/security/advisories/GHSA-qpgw-2c72-4c89
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000490
- https://github.com/mautic/mautic/commit/3b01786433ae15e9a23f1eb9b0d3dfdb065b6241
- https://github.com/mautic/mautic/releases/tag/2.12.0
CVE-2017-1000490 · published · modified · JSON