{"action":"Upgrade mautic/core to 5.2.3 or later.","affected":[{"fixed":"5.2.3","introduced":"0"}],"component":"mautic/core","cve_ids":["CVE-2022-25773"],"ecosystem":"Packagist","epss":0.00594,"exploited":false,"fixed_versions":["5.2.3"],"ghsa_id":"GHSA-4w2w-36vm-c8hf","id":"tcs_01M5KEVC2Y83YDQ1WC8Q10W55T","modified_at":"2025-10-16T20:51:33.085042Z","published_at":"2025-02-26T20:09:28Z","references":["https://osv.dev/vulnerability/GHSA-4w2w-36vm-c8hf","https://github.com/mautic/mautic/security/advisories/GHSA-4w2w-36vm-c8hf","https://nvd.nist.gov/vuln/detail/CVE-2022-25773","https://github.com/mautic/mautic/commit/e6aaad99f399c5df1ce6273609920098e5c2564a","https://github.com/mautic/mautic"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-4w2w-36vm-c8hf","url":"https://osv.dev/vulnerability/GHSA-4w2w-36vm-c8hf"}],"summary":"Mautic allows Relative Path Traversal in assets file upload"}