All vulnerabilities

Servers and applications

CVE-2025-9824

User Enumeration via Response Timing

Severity
Medium 5.9
Published
3 Sept 2025
Last changed
3 Sept 2025
Added to UpHeron
3 Nov 2026
Fixed in
4.4.17, 5.2.8, 6.0.5
Also known as
GHSA-3ggv-qwcp-j6xg
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MauticServers and applications · github:mautic/mautic
  • From 4.4.0 before 4.4.17
  • From 5.0.0-alpha before 5.2.8
  • From 6.0.0-alpha before 6.0.5

References