CVE-2017-1000490

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-1000490
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000490.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000490
Aliases
Published
2018-01-03T17:29:00Z
Modified
2024-05-14T06:16:34.039443Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.

References

Affected packages

Git / github.com/mautic/mautic

Affected ranges

Type
GIT
Repo
https://github.com/mautic/mautic
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
078224f8cf6d04c97d61e1b5bde9b186d6294b64
Last affected
0d32a7215b375a23e8eee34b68ca293b380adfbc
Last affected
0d8cb6272ca2d662f295567cafd9d7ff88ebedff
Last affected
0eca57e56f026e197e92d6503d775638c5c9beff
Last affected
102aa9fb532d74daa47bffd79389dc5f21bd73b9
Last affected
25b9d121a510999bf1c823bee70328a35f51c2d2
Last affected
33c2c1a7d0aba3fae35c18c146a253909b1f0d6f
Last affected
3a74446999140733c1a1210c39284d1f25a46a81
Last affected
3ed237d8d44cbd269a16e18530106ed92935a518
Last affected
41ced3a8454de4950c7da4c81291993737783930
Last affected
449f1eb72c9dc0dddc04e8792051023545648420
Last affected
4c395d54d6342ad2c7e752de07e285a83a2799d8
Last affected
50c4adadf9fe56d34bb8884ee2215d2ad7e8692a
Last affected
513c1268d3ce3345e9b6d0953a9098e77428abf5
Last affected
51f4ca271ed87e38b1d34f32af5f6d112917f521
Last affected
5c2f3c22b008666aed443dffc2268649ee7ea19e
Last affected
64527a76a0c48f54c543a919fdec00a743eee002
Last affected
66ccd23bd8450dec943c1dba218ddbc399d06c00
Last affected
6c7d52e0a4e3491ab9ad7f8b484e3dc4b19ece4a
Last affected
7330d195bdbf0886238f92f04add5eda9c04f3fa
Last affected
7b731c4043211f861ef3ba1df7bd05741704baad
Last affected
a4b9da32d287162a1311ec3efe6ba2eb83f000db
Last affected
ae90b4d829096bb51cbd58c8b4b1cbf2b3ec3bd4
Last affected
af554dd1398ebfbe27e1244afc484d0a226de185
Last affected
b4b6357c331b08e39d15b43187f8b859eeb5b40e
Last affected
b90a26f17f32d99a168d9de330cd88456c9d18a8
Last affected
b9b8dfa37f33d48b8d60a8f6248a61b5f3f59573
Last affected
ba4c58a5d12119f6c23cf28b60da0965d20a7513
Last affected
c40a4564db86d057606f1b3d4325823933f1eecb
Last affected
cd0be0462a8ce50f9f5773807b06085e1821b13c
Last affected
d0779771677645e56799c62b9612371244e553a2
Last affected
d18f4b0151ba46da8721bbf47a215bcecc9aecde
Last affected
d59f75f17a9c559ee5143e38ddd6ef0a8be59002
Last affected
d5a7e75c55820dd1c20384691f732bbe396df9ad
Last affected
d5cc52c63d14c0a65c135dfad6f7615d9fb40383
Last affected
d6c7ddb1f9456d54753cb1dbb9de8eb9103609e1
Last affected
d8c08b0cdf13dd34b2f214b06d543023f02a4c01
Last affected
dbcbd790742c9976a4d9e42039a7c7005f284b7a
Last affected
dc3d7c188e8c6f389614a18e427b99b4280baedb
Last affected
dca3b03f8ab26600cb875556b1a276995680de32
Last affected
e8f705b9c1990077aa944ef2aaf5b705591bfe05
Last affected
e9bc0ada5bd51acb977d0f60e0b4e4073acc6dc4
Last affected
ec713864b721b9b7ffdff64056aec473bda373ab
Last affected
f34c537b3b2a82f8c78a70d1890096ddecc27957
Last affected
faf9d26cde1c1ac0b268e2673146965569dfec04
Last affected
fbffb1d7eb4aa33221849f8e0f2a0075ab7c82fa

Affected versions

1.*

1.0.0
1.0.0-beta
1.0.0-beta2
1.0.0-beta3
1.0.0-beta4
1.0.0-rc1
1.0.0-rc2
1.0.0-rc3
1.0.0-rc4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
1.2.0-beta1
1.2.1
1.2.2
1.2.3
1.2.4
1.3.0
1.3.1
1.4.0
1.4.1

2.*

2.0.0
2.0.1
2.1.0
2.1.1
2.2.0
2.2.1
2.3.0