Medium severity · published Apr 10, 2024
CVE-2024-3448
Improper Access Control Leads to Server-Side Request Forgery in Mautic
5.0
CVSS
0.4%
EPSS
No
On KEV
Description
Users with low privileges can perform certain AJAX actions. In this vulnerability instance, improper access to ajax?action=plugin:focus:checkIframeAvailability leads to a Server-Side Request Forgery by analyzing the error messages returned from the back-end. Allowing an attacker to perform a port scan in the back-end. At the time of publication of the CVE no patch is available.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mautic · Mautic
through 4.4.9 · source: vendor, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-3448
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-3448
huntr.com
https://huntr.com/bounties/4d72d300-92d6-4e3c-93d8-52fe47396ae0
More from Mautic
9.8
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection
9.1
CVE-2022-25769
Improper regex in htaccess file
9.0
CVE-2025-13828
Mautic user without privileged access to the Marketplace can install and uninstall composer packages
9.0
CVE-2021-27915
XSS Cross-site Scripting Stored (XSS) - Description field
9.0
CVE-2020-35129
Mautic before 3.2.4 is affected by stored XSS