CVE-2024-2730

Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic

Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available

Affected

Mautic

CVSS v3.1 NCSC

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.51% chance of exploitation in the next 30 days, 43rd percentile

Published

2024-04-10

Updated

2024-08-09

Proof-of-concept exploits (1)

• https://huntr.com/bounties/cd3321a4-9ebc-48fa-8d4c-b5720089c2d9

References

• CVE Record
• NVD entry