CVE-2021-27916highCWE-22

CVE-2021-27916: fallo de gravedad alta en Mautic

Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Mautic+ Monitorear mautic/core

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.1epss 0.8%
Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion. Regardless of the level of access the Mautic user had, they could delete files other than those in the media folders such as system files, libraries or other important files. This vulnerability exists in the implementation of the GrapesJS builder in Mautic.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Productos afectados
Mautic · Mautic
CVEs relacionadas — Mautic

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-25772CRITICALCVE-2022-25772EPSS 63.0%CVE-2021-27909MEDIUMXSS vulnerability on password reset pageEPSS 4.1%CVE-2021-27910HIGHStored XSS vulnerability on Bounce Management CallbackEPSS 0.7%CVE-2021-27911HIGHXSS vulnerability on contacts viewEPSS 0.6%CVE-2021-27915HIGHXSS Cross-site Scripting Stored (XSS) - Description fieldEPSS 0.6%CVE-2021-27912HIGHXSS vulnerability on asset viewEPSS 0.6%