CVE-2022-25770
Insufficient authentication in upgrade flow
概要
Insufficient authentication in upgrade flow
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mautic allows you to update the application via an upgrade script.
The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.
This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web packagist.org