CVE-2022-25777 — Server-Side Request Forgery in Asset section

CVE-2022-25777

Server-Side Request Forgery in Asset section PUBLISHED

Description (CNA)

Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.

Affected (CNA)

Vendor / product	Versions
Mautic / Mautic	affected >= 1.0.0-beta4 before < 4.4.12; affected > 5.0.0 before < 5.0.4

CWE

CWE-918

References

https://github.com/mautic/mautic/security/advisories/GHSA-mgv8-w49f-822w

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.