PT-2021-11712 · Mautic · Mautic

Dardan Prebreza · Published 2021-01-19 · Updated 2022-05-24 · CVE-2020-35128

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 3.2.4

Description: The issue allows an attacker with permission to manage companies to perform stored XSS attacks on other users, including administrators. By loading an externally crafted JavaScript file, the attacker could eventually perform actions as the target user, such as changing user passwords, altering user or email addresses, or adding a new administrator to the system.

Recommendations: For versions prior to 3.2.4, update to version 3.2.4 or later to resolve the issue. As a temporary workaround, consider restricting the permission to manage companies to trusted users only, and avoid loading externally crafted JavaScript files.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-35128

GHSA-98J2-3JV7-274M

Affected Products

Mautic

References · 10

• 🔥 https://forum.mautic.org/t/security-release-for-all-versions-of-mautic-prior-to-2-16-5-and-3-2-4/17786 · Exploit
• https://forum.mautic.org/c/announcements/16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35128 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35128 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-98j2-3jv7-274m · Vendor Advisory
• https://github.com/mautic/mautic · Note
• https://labs.bishopfox.com/advisories/mautic-version-3.2.2 · Note
• https://t.me/cibsecurity/22261 · Telegram Post
• https://t.me/cvenotify/10227 · Telegram Post
• https://t.me/cvenotify/8676 · Telegram Post