High severity · published Sep 18, 2024
CVE-2022-25770
Insufficient authentication in upgrade flow
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
Mautic allows you to update the application via an upgrade script.
The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.
This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mautic · Mautic
>= 1.0.0-beta3 before < 4.4.13; >= 5.0.0 before < 5.1.1. · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-25770
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-25770
Vendor Advisory
https://github.com/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc
More from Mautic
9.8
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection
9.1
CVE-2022-25769
Improper regex in htaccess file
9.0
CVE-2025-13828
Mautic user without privileged access to the Marketplace can install and uninstall composer packages
9.0
CVE-2021-27915
XSS Cross-site Scripting Stored (XSS) - Description field
9.0
CVE-2020-35129
Mautic before 3.2.4 is affected by stored XSS