High severity7.7NVD Advisory· Published Feb 26, 2025· Updated Jun 17, 2026
CVE-2024-47053
CVE-2024-47053
Description
This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data.
- Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated user, regardless of assigned roles or permissions, can access all reports and their associated data via the API. This bypasses the intended access controls governed by the "Reporting Permissions > View Own" and "Reporting Permissions > View Others" permissions, which should restrict access to non-System Reports.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
mautic/corePackagist | >= 1.0.1, < 5.2.3 | 5.2.3 |
Affected products
3Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-8xv7-g2q3-fqgcghsaADVISORY
- github.com/mautic/mautic/security/advisories/GHSA-8xv7-g2q3-fqgcnvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2024-47053ghsaADVISORY
- cwe.mitre.org/data/definitions/287.htmlnvdNot ApplicableWEB
- docs.mautic.org/en/5.2/configuration/settings.htmlnvdProductWEB
- github.com/mautic/mautic/commit/9d7ee57c92502ef77cddb091011c5ffef14b11eeghsaWEB
News mentions
0No linked articles in our index yet.