PT-2025-35722 · Mautic · Mautic

B0D0B0P0T + 2 · Published 2025-09-03 · Updated 2025-09-03 · CVE-2025-9822

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions mautic (affected versions not specified)

Description A user with administrator rights can modify the application’s configuration and extract sensitive information that is normally inaccessible. This allows an administrator to disclose parameters, such as database credentials, to which they should not have access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-283

Related Identifiers

CVE-2025-9822

GHSA-438M-6MHW-HQ5W

Affected Products

Mautic

References · 9

• https://osv.dev/vulnerability/CVE-2025-9822 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9822 · Security Note
• https://osv.dev/vulnerability/GHSA-438m-6mhw-hq5w · Vendor Advisory
• https://github.com/mautic/mautic/security/advisories/GHSA-438m-6mhw-hq5w · Note
• https://github.com/mautic/mautic · Note
• https://github.com/mautic/mautic/commit/882c2c5be646e36f7b91e7c4b24f71aafa617cd5 · Note
• https://github.com/mautic/mautic/commit/a310b1933de7cfefec03382a4d8c0d9dbbaa0600 · Note
• https://twitter.com/CVEnew/status/1963275350927868133 · Twitter Post
• https://t.me/CVEtracker/31602 · Telegram Post