Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2017-1000490

Disclosure Date: January 03, 2018 (last updated November 26, 2024)
Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.
0
0
Attacker Value
Unknown

CVE-2017-1000489

Disclosure Date: January 03, 2018 (last updated November 26, 2024)
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
0
0