PT-2021-11710 · Mautic · Mautic

Naveen Sunkavally · Published 2021-01-19 · Updated 2021-02-09 · CVE-2020-35124

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 2.16.5 Mautic versions prior to 3.2.4

Description: A cross-site scripting (XSS) issue in the assets component allows remote attackers to inject executable JavaScript through the Referer header of asset downloads. This could allow an attacker unauthorized administrator-level access to Mautic.

Recommendations: For versions prior to 2.16.5, upgrade to 2.16.5. For versions prior to 3.2.4, upgrade to 3.2.4.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-35124

GHSA-39WJ-J3JC-858M

Affected Products

Mautic

References · 11

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2020-35124.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-39wj-j3jc-858m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35124 · Security Note
• https://forum.mautic.org/c/announcements/16 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-35124 · Vendor Advisory
• https://github.com/mautic/mautic/security/advisories/GHSA-39wj-j3jc-858m · Note
• https://github.com/mautic/mautic/commit/20c5dc39b62164f6922ce53ea42cbb4ccec64e57 · Note
• https://packagist.org/packages/mautic/core · Note
• https://t.me/cibsecurity/23338 · Telegram Post
• https://mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4 · Note
• https://horizon3.ai/disclosures/mautic-unauth-xss-to-rce · Note