CVE-2025-13828
1 advisory.
Packagist/mautic/core CVE-2025-13828: critical 9, EPSS 0.25%
Mautic user without privileged access to the Marketplace can install and uninstall composer packages
Action: Upgrade mautic/core to 4.4.18 or later.
composer require mautic/core:4.4.18composer require mautic/core:5.2.9composer require mautic/core:6.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.4.18 | - |
| 5.0.0 | 5.2.9 | - |
| 6.0.0 | 6.0.7 | - |
Fixed versions
| 4.4.18 | 5.2.9 | 6.0.7 |
Sources
- osv: GHSA-3fq7-c5m8-g86x
- nvd: CVE-2025-13828
- https://github.com/mautic/mautic/security/advisories/GHSA-3fq7-c5m8-g86x
- https://github.com/mautic/mautic
CVE-2025-13828 · published · modified · JSON