CVE-2024-2730

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-2730

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2730.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-2730

Published

2024-04-10T13:59:36.195Z

Modified

2026-07-15T01:49:20.003222026Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic

Details

Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available

Database specific

{
    "cwe_ids": [
        "CWE-425"
    ],
    "cna_assigner": "NCSC.ch",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2730.json"
}

References

Affected packages

Git / github.com/mautic/mautic

Affected ranges

Type

GIT

Repo

https://github.com/mautic/mautic

Events

Introduced

Last affected

aa4f8b678bc13edf0b9f1f51cf7d642b6fbaf347

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.4.9"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*

1.0.0

1.0.0-beta2

1.0.0-beta3

1.0.0-beta4

1.0.0-rc1

1.0.0-rc2

1.0.0-rc3

1.0.0-rc4

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.1.0

1.1.1

1.1.2

1.1.3

1.2.0

1.2.1

1.2.2

1.2.3

1.2.4

1.3.0

1.3.1

1.4.0

1.4.1

2.*

2.0.0

2.0.1

2.1.0

2.1.1

2.12.2-beta

2.14.2-beta

2.2.0

2.2.1

2.3.0

2.4.0

2.5.0

2.5.1

2.6.0

2.6.1

2.7.0

2.7.1

2.8.0

3.*

3.0.1

3.1.0

3.1.0-rc

3.3.0-rc

4.*

4.0.0

4.0.0-alpha1

4.0.0-beta

4.0.0-rc

4.1.0

4.2.0

4.3.0

4.3.0-beta

4.3.0-rc

4.3.1

4.4.0

4.4.0-beta

4.4.1

4.4.2

4.4.3

4.4.4

4.4.5

4.4.6

4.4.7

4.4.8

4.4.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2730.json"