CVE-2022-25770 json
Insufficient authentication in upgrade flow
published 2024-09-18 2 y ago modified 2026-06-17 4 mo ago also GHSA-qf6m-6m4g-rmrc , EUVD-2024-2721
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 20%
- public exploits
- 0
- none known
Summary
Mautic allows you to update the application via an upgrade script.
The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.
This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.
Patch / fix
- packagist mautic/core 4.4.13, 5.1.1
- packagist mautic/core-lib 4.4.13, 5.1.1
- Mautic Mautic < 4.4.13, < 5.1.1.
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.28% chance of exploitation in the next 30 days, higher than 20% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
| GitHub | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | mautic/core | >=1.0.0-beta3, <4.4.13 >=5.0.0-alpha, <5.1.1 |
4.4.13 5.1.1 |
| packagist | mautic/core-lib | >=1.0.0-beta3, <4.4.13 >=5.0.0-alpha, <5.1.1 |
4.4.13 5.1.1 |
Affected products
- Mautic Mautic
Classification
- Weakness
-
- CWE-306 Missing Authentication for Critical Functionality
References
-
github.com
/mautic/mautic/commit/73b18e9a434a28e528fe0e3d03620e7367bdcdca
web
-
github.com
/mautic/mautic/commit/aee7bfb7510a83acf178a7f02da9661c040e9abf
web
-
github.com
/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc
web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2022-25770
advisory
-
github.com
/mautic/mautic
package
Sources
- CVE List CVE-2022-25770
- GitHub Advisory GHSA-qf6m-6m4g-rmrc
- NVD CVE-2022-25770
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.