VULNERABILITY INTELLIGENCE

CVE-2022-25775

CVSS score6.6 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2024-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems.

Weakness classification

  • security@mautic.org: CWE-89
  • nvd@nist.gov: CWE-89

Primary references