UpHeron
All vulnerabilities

Servers and applications

CVE-2024-47053

Improper Authorization in Reporting API

Severity
High 7.7
Published
25 Feb 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.2.3
Also known as
GHSA-8xv7-g2q3-fqgc
Sources
NVD, Project advisories (GitHub)

Description

This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. * Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated user, regardless of assigned roles or permissions, can access all reports and their associated data…

Affected software

SoftwareAffected versions
MauticServers and applications · cpe:a:acquia:mautic
  • From 1.0.1 before 5.2.3
MauticServers and applications · github:mautic/mautic
  • From 1.0.1 before 5.2.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-47053
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-47053
  • GitHub Advisory Database https://github.com/advisories/GHSA-8xv7-g2q3-fqgc
  • github.com https://github.com/mautic/mautic/security/advisories/GHSA-8xv7-g2q3-fqgc