CVE-2017-1000490

Published: Jan 3, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.

Affected (46)

Products: Acquia: Mautic · Mautic: Mautic

Acquia

1 product

Mautic

1 product

Mautic

Configuration A

46 vulnerable

Vulnerable Software	Affected Versions
Acquia Mautic	Version 1.0.1
Acquia Mautic	Version 1.0.2
Acquia Mautic	Version 1.0.3
Acquia Mautic	Version 1.0.4
Acquia Mautic	Version 1.0.5
Acquia Mautic	Version 1.1.0
Acquia Mautic	Version 1.1.1
Acquia Mautic	Version 1.1.2
Acquia Mautic	Version 1.1.3
Acquia Mautic	Version 1.2.0 beta1
Acquia Mautic	Version 1.2.1
Acquia Mautic	Version 1.2.2
Acquia Mautic	Version 1.2.3
Acquia Mautic	Version 1.2.4
Acquia Mautic	Version 1.3.0
Acquia Mautic	Version 1.3.1
Acquia Mautic	Version 1.4.0
Acquia Mautic	Version 1.4.1
Acquia Mautic	Version 2.0.0
Acquia Mautic	Version 2.0.1
Acquia Mautic	Version 2.1.0
Acquia Mautic	Version 2.1.1
Acquia Mautic	Version 2.10.0 beta
Acquia Mautic	Version 2.10.1
Acquia Mautic	Version 2.11.0 beta
Acquia Mautic	Version 2.2.0
Acquia Mautic	Version 2.2.1
Acquia Mautic	Version 2.3.0
Acquia Mautic	Version 2.4.0
Acquia Mautic	Version 2.5.0
Acquia Mautic	Version 2.5.1
Acquia Mautic	Version 2.6.0
Acquia Mautic	Version 2.6.1
Acquia Mautic	Version 2.7.0
Acquia Mautic	Version 2.7.1
Acquia Mautic	Version 2.8.0
Acquia Mautic	Version 2.8.1
Acquia Mautic	Version 2.8.2
Acquia Mautic	Version 2.9.0 beta
Acquia Mautic	Version 2.9.1
Mautic Mautic	Version 1.0.0
Mautic Mautic	Version 1.2.0
Mautic Mautic	Version 2.10.0
Mautic Mautic	Version 2.11.0
Mautic Mautic	Version 2.9.0
Mautic Mautic	Version 2.9.2

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (2)

https://github.com/mautic/mautic/releases/tag/2.12.0

Source: cve@mitre.org

ExploitRelease NotesThird Party Advisory

https://github.com/mautic/mautic/releases/tag/2.12.0

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitRelease NotesThird Party Advisory

Timeline

No history available yet.