CVE-2022-25768 json
Improper Access Control in UI upgrade process
published 2024-09-18 2 y ago modified 2026-06-17 4 mo ago also GHSA-x3jx-5w6m-q2fc , EUVD-2024-2891
- cvss
- 7.0
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 21%
- public exploits
- 0
- none known
Summary
The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade process without permission. As upgrading in the user interface is deprecated, this functionality is no longer required.
Patch / fix
- packagist mautic/core-lib 4.4.13, 5.1.1
- packagist mautic/core 4.4.13, 5.1.1
- Mautic Mautic < 4.4.13, < 5.1.1
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.29% chance of exploitation in the next 30 days, higher than 21% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
| GitHub | 3.1 | 7.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | mautic/core-lib | >=1.1.3, <4.4.13 >=5.0.0-alpha, <5.1.1 |
4.4.13 5.1.1 |
| packagist | mautic/core | >=1.1.3, <4.4.13 >=5.0.0-alpha, <5.1.1 |
4.4.13 5.1.1 |
Affected products
- Mautic Mautic
Classification
References
-
github.com
/mautic/mautic/commit/89f964d06f00688016b38a56dfd9e95fc676c7ce
web
-
github.com
/mautic/mautic/commit/925aeee7d3dbb6ca67f92d9dc5893d99250f739b
web
-
github.com
/mautic/mautic/security/advisories/GHSA-x3jx-5w6m-q2fc
web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2022-25768
advisory
-
github.com
/mautic/mautic
package
Sources
- CVE List CVE-2022-25768
- GitHub Advisory GHSA-x3jx-5w6m-q2fc
- NVD CVE-2022-25768
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.