CVE-2022-25769

HIGH

Mautic < 3.3.5 - Unauthenticated Arbitrary PHP File Execution via .htaccess Bypass

Title source: llm

Description

ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path.

References (2)

Core 2

Core References

Vendor Advisory

https://github.com/mautic/mautic/security/advisories/GHSA-mj6m-246h-9w56

Release Notes

https://www.mautic.org/blog/community/mautic-4-2-one-small-step-mautic

Scores

CVSS v3 7.2

EPSS 0.0050

EPSS Percentile 38.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-1284

Status published

Products (2)

acquia/mautic < 3.3.5

mautic/core 0 - 3.3.5Packagist

Published Sep 18, 2024

Tracked Since Feb 18, 2026