GHSA-7vvh-xqq4-w777

ghsaUSosv

Mautic Cross-Site Request Forgery (CSRF)

view advisory published 2022-05-13Licence: CC-BY-4.0

Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-8874US	high8.8	0.76% (55th)	—	2017-05-10
Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns…

references

External citations — patches, advisories, analysis.

https://github.com/mautic/mauticPACKAGE
https://github.com/mautic/mautic/issues/3486WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-8874ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan