mautic/core vulnerabilities

2 known vulnerabilities in mautic/core from Mautic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  mautic/core: Improper Authorization

  CVE-2024-47053Feb 26, 2025Mautic

  This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. * Improper Authorization: An authorization flaw exists in Mautic's API Authorizatio

• 9.9 Critical severity

  mautic/core: Relative Path Traversal

  CVE-2024-47051Feb 26, 2025MauticEPSS 1.8%

  This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticated users. * Remote Code Execution (RCE) via Asset Upload: A Remote Code Execution vulnerability has be