All vulnerabilities

Servers and applications

CVE-2025-9822

Secret data extraction via elfinder

Severity
Medium 5.5
Published
3 Sept 2025
Last changed
3 Sept 2025
Added to UpHeron
3 Nov 2026
Fixed in
4.4.17, 5.2.8, 6.0.5
Also known as
GHSA-438m-6mhw-hq5w
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MauticServers and applications · github:mautic/mautic
  • From 4.4.0 before 4.4.17
  • From 5.0.0-alpha before 5.2.8
  • From 6.0.0-alpha before 6.0.5

References