UpHeron
All vulnerabilities

Servers and applications

CVE-2017-1000490

Mautic users able to download any files from server using filemanager

Severity
Medium 6.5
Published
3 Jan 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.12.0
Exploit chance
1.4% in the next 30 daysHigher than 72% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
Path traversal (CWE-22)
Attack
Over the network · Needs a user account · No user action needed
Attacker can
Read data
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Also known as
GHSA-qpgw-2c72-4c89
Sources
NVD, Project advisories (GitHub)

Description

Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.

From mautic/mautic's security advisory.

Workarounds

None

Workarounds as given by mautic/mautic's security advisory.

Affected software

SoftwareAffected versions
MauticServers and applications · cpe:a:acquia:mautic
  • Version 2.11.0-beta
  • Version 2.10.1
  • Version 2.10.0-beta
  • Version 2.9.1
All 40 release lines
  • Version 1.0.1
  • Version 1.0.2
  • Version 1.0.3
  • Version 1.0.4
  • Version 1.0.5
  • Version 1.1.0
  • Version 1.1.1
  • Version 1.1.2
  • Version 1.1.3
  • Version 1.2.0-beta1
  • Version 1.2.1
  • Version 1.2.2
  • Version 1.2.3
  • Version 1.2.4
  • Version 1.3.0
  • Version 1.3.1
  • Version 1.4.0
  • Version 1.4.1
  • Version 2.0.0
  • Version 2.0.1
  • Version 2.1.0
  • Version 2.1.1
  • Version 2.2.0
  • Version 2.2.1
  • Version 2.3.0
  • Version 2.4.0
  • Version 2.5.0
  • Version 2.5.1
  • Version 2.6.0
  • Version 2.6.1
  • Version 2.7.0
  • Version 2.7.1
  • Version 2.8.0
  • Version 2.8.1
  • Version 2.8.2
  • Version 2.9.0-beta
  • Version 2.9.1
  • Version 2.10.0-beta
  • Version 2.10.1
  • Version 2.11.0-beta
MauticServers and applications · github:mautic/mautic
  • From 1.0 before 2.12.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-1000490
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-1000490
  • GitHub Advisory Database https://github.com/advisories/GHSA-qpgw-2c72-4c89
  • github.com https://github.com/mautic/mautic/security/advisories/GHSA-qpgw-2c72-4c89