CVE-2020-35128
1 advisory.
Packagist/mautic/core CVE-2020-35128: critical 9
Mautic stored Cross-site Scripting (XSS)
Action: Upgrade mautic/core to 2.16.5 or later.
composer require mautic/core:3.2.4composer require mautic/core:2.16.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.2.4 | - |
| 2.0.0 | 2.16.5 | - |
Fixed versions
| 3.2.4 | 2.16.5 |
Sources
- osv: GHSA-98j2-3jv7-274m
- https://nvd.nist.gov/vuln/detail/CVE-2020-35128
- https://forum.mautic.org/c/announcements/16
- https://forum.mautic.org/t/security-release-for-all-versions-of-mautic-prior-to-2-16-5-and-3-2-4/17786
- https://github.com/mautic/mautic
- https://labs.bishopfox.com/advisories/mautic-version-3.2.2
CVE-2020-35128 · published · modified · JSON