PT-2024-32376 · Mautic · Mautic

Lenon Leite + 2 · Published 2024-09-18 · Updated 2025-03-19 · CVE-2024-47051

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mautic versions prior to 5.2.3

Description The issue involves two critical security vulnerabilities that can be exploited by authenticated users. The first vulnerability is a Remote Code Execution (RCE) issue via asset upload, where insufficient enforcement of allowed file extensions allows an attacker to upload executable files, such as PHP scripts. The second vulnerability is a Path Traversal issue in the upload validation process, which enables an authenticated user to manipulate the file deletion process and delete arbitrary files on the host system. It is estimated that over 200,000 organizations are exposed to this vulnerability.

Recommendations To resolve the issue, update to Mautic version 5.2.3 or later. As a temporary workaround, consider restricting access to the asset upload functionality and the upload validation process to minimize the risk of exploitation. Additionally, monitor system logs for suspicious activity and implement additional security measures to prevent unauthorized access.

Fix

RCE

Missing Authentication

Relative Path Traversal

Code Injection

Weakness Enumeration

CWE-306

CWE-23

CWE-94

Related Identifiers

CVE-2024-47051

GHSA-73GX-X7R9-77X2

GHSA-QF6M-6M4G-RMRC

Affected Products

Mautic

References · 31

• https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-47051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25770 · Security Note
• https://osv.dev/vulnerability/GHSA-73gx-x7r9-77x2 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qf6m-6m4g-rmrc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47051 · Security Note
• https://github.com/mautic/mautic · Note
• https://github.com/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc · Note
• https://github.com/mautic/mautic/commit/75bc488ce98b9c8ec01114984049fc1c42c0cae5 · Note
• https://github.com/mautic/mautic/commit/73b18e9a434a28e528fe0e3d03620e7367bdcdca · Note
• https://github.com/mautic/mautic/commit/aee7bfb7510a83acf178a7f02da9661c040e9abf · Note
• https://owasp.org/www-community/attacks/Code_Injection · Note
• https://twitter.com/the_yellow_fall/status/1896377128083685882 · Twitter Post
• https://twitter.com/zoomeye_team/status/1896406090474271093 · Twitter Post
• https://t.me/brutsecurity/1597 · Telegram Post