VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 18, 2024· Updated Jun 17, 2026

CVE-2022-25770

CVE-2022-25770

Description

Mautic allows you to update the application via an upgrade script.

The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.

This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
mautic/corePackagist
>= 1.0.0-beta3, < 4.4.134.4.13
mautic/corePackagist
>= 5.0.0-alpha, < 5.1.15.1.1
mautic/core-libPackagist
>= 1.0.0-beta3, < 4.4.134.4.13
mautic/core-libPackagist
>= 5.0.0-alpha, < 5.1.15.1.1

Affected products

11
  • ghsa-coords2 versions
    pkg:composer/mautic/corepkg:composer/mautic/core-lib
    >= 1.0.0-beta3, < 4.4.13+ 1 more
    • (no CPE)range: >= 1.0.0-beta3, < 4.4.13
    • (no CPE)range: >= 1.0.0-beta3, < 4.4.13
  • Mautic/Mautic9 versions
    cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*range: >=1.0.1,<4.4.13
    • cpe:2.3:a:acquia:mautic:1.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc4:*:*:*:*:*:*
    • (no CPE)range: >= 1.0.0-beta3

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.