GitHub Advisoryadvisory · Packagist

GHSA-7vvh-xqq4-w777 Mautic Cross-Site Request Forgery (CSRF)

HIGH Published 2022-05-13 Modified 2024-04-23 Official page ↗
Aliases
CVE-2017-8874
Ecosystem
Packagist
Packages
mautic/core
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352
Reviewed
2024-04-23

Affected packages

• Packagist mautic/core: 1.4.1 (no fix yet)

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.

Related

Alias · CVE (1)

  • CVE-2017-8874 Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References