UpHeron
All vulnerabilities

Servers and applications

CVE-2022-25775

Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems.

Severity
High 7.2
Published
18 Sept 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.4.12, 5.0.4
Sources
NVD

Affected software

SoftwareAffected versions
MauticServers and applications · cpe:a:acquia:mautic
  • From 2.14.1 before 4.4.12
  • From 5.0.0 before 5.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-25775
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-25775