packagist mautic/core-lib Security Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist mautic/core-lib Security Advisories

Browse all Security Advisories for packagist mautic/core-lib

Moderate

GSA_kwCzR0hTQS1xZjZtLTZtNGctcm1yY84AA_rj

Mautic has insufficient authentication in upgrade flow
Ecosystems: packagist
Packages: mautic/core-lib, mautic/core
Source: GitHub Advisory Database
Blast Radius: 15.0
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS14cGM1LXJyMzktdjh2Ms4AA_ri

Mautic has an XSS in contact tracking and page hits report
Ecosystems: packagist
Packages: mautic/core, mautic/core-lib
Source: GitHub Advisory Database
Blast Radius: 14.1
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS03M2dyLTMyd2ctcWhoN84AA_rh

Mautic vulnerable to XSS in contact/company tracking (no authentication)
Ecosystems: packagist
Packages: mautic/core-lib, mautic/core
Source: GitHub Advisory Database
Blast Radius: 10.4
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS14djY4LXJybXctOXh3Zs4AA_rg

Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)
Ecosystems: packagist
Packages: mautic/core-lib, mautic/core
Source: GitHub Advisory Database
Blast Radius: 9.3
Published: 5 months ago

High

GSA_kwCzR0hTQS14M2p4LTV3Nm0tcTJmY84AA_rI

Mautic vulnerable to Improper Access Control in UI upgrade process
Ecosystems: packagist
Packages: mautic/core, mautic/core-lib
Source: GitHub Advisory Database
Blast Radius: 13.5
Published: 5 months ago

Statistics

Advisories: 21,224
Packages: 9,272
Repositories: 1
Ecosystems: 12

Filter by Severity

Moderate 9,092 High 7,444 Critical 3,108 Low 1,199

Filter by Ecosystem

maven 5,987 packagist 4,749 pypi 4,467 npm 3,891 go 2,420 nuget 1,610 cargo 933 rubygems 887 swift 35 hex 32 actions 22 pub 10

Filter by Package

moodle/moodle 367 magento/community-edition 235 typo3/cms 174 pimcore/pimcore 119 dolibarr/dolibarr 115 typo3/cms-core 107 drupal/core 99 microweber/microweber 97 phpmyadmin/phpmyadmin 93 silverstripe/framework 89 drupal/drupal 83 librenms/librenms 80 thorsten/phpmyfaq 73 symfony/symfony 69 concrete5/concrete5 60 shopware/platform 52 craftcms/cms 48 baserproject/basercms 47 nilsteampassnet/teampass 40 shopware/core 40 showdoc/showdoc 40 intelliants/subrion 39 froxlor/froxlor 38 mautic/core 37 snipe/snipe-it 35 zendframework/zendframework1 34 getgrav/grav 30 shopware/shopware 30 mediawiki/core 28 centreon/centreon 27 prestashop/prestashop 26 contao/core-bundle 24 magento/core 24 grumpydictator/firefly-iii 23 remdex/livehelperchat 23 pocketmine/pocketmine-mp 23 simplesamlphp/simplesamlphp 23 zendframework/zendframework 23 tribalsystems/zenario 22 getkirby/cms 22 phpoffice/phpspreadsheet 21 funadmin/funadmin 20 laravel/framework 20 contao/contao 19 topthink/framework 18 forkcms/forkcms 18 cockpit-hq/cockpit 18 francoisjacquet/rosariosis 17 yetiforce/yetiforce-crm 17 cakephp/cakephp 17 ezsystems/ezpublish-kernel 17 genix/cms 17 symfony/security 17 opencart/opencart 17 phpbb/phpbb 16 typo3/cms-backend 16 openmage/magento-lts 16 symfony/security-http 15 october/system 15 ec-cube/ec-cube 15 smarty/smarty 15 feehi/cms 14 codeigniter4/framework 14 dompdf/dompdf 14 bolt/bolt 14 silverstripe/cms 14 phpmailer/phpmailer 14 phpmyfaq/phpmyfaq 13 sylius/sylius 13 studio-42/elfinder 13 pimcore/admin-ui-classic-bundle 13 lavalite/cms 13 admidio/admidio 13 impresscms/impresscms 13 elefant/cms 13 wwbn/avideo 12 symfony/http-foundation 12 TinyMCE 11 tinymce/tinymce 11 ezsystems/ezplatform-kernel 11 nukeviet/nukeviet 11 wallabag/wallabag 11 pagekit/pagekit 11 feehi/feehicms 11 tinymce 11 october/october 10 ezsystems/ezpublish-legacy 10 yiisoft/yii2 10 ssddanbrown/bookstack 10 sulu/sulu 10 pimcore/customer-management-framework-bundle 9 statamic/cms 9 twig/twig 9 alextselegidis/easyappointments 9 concrete5/core 9 twbs/bootstrap 9 org.webjars:bootstrap 9 bootstrap 9 bootstrap 9 bootstrap 9 kevinpapst/kimai2 9 contao/core 9 facturascripts/facturascripts 8 silverstripe/admin 8 pterodactyl/panel 8 croogo/croogo 8 mantisbt/mantisbt 8 october/cms 8 gilacms/gila 8 composer/composer 8 codiad/codiad 8 tecnickcom/tcpdf 8 silverstripe/graphql 8 ezsystems/ezplatform-admin-ui 8 symfony/http-kernel 7 bootstrap.sass 7 bootstrap-sass 7 billz/raspap-webgui 7 wpglobus/wpglobus 7 spatie/browsershot 7 flarum/core 7 passbolt/passbolt_api 7 backdrop/backdrop 7 october/backend 7 drupal/core-recommended 6 oro/platform 6 in2code/femanager 6 dweeves/magmi 6 vrana/adminer 6 gleez/cms 6 bootstrap-sass 6 typo3/cms-install 6 bagisto/bagisto 6 simplesamlphp/saml2 6 pear/archive_tar 6 guzzlehttp/guzzle 6 nystudio107/craft-seomatic 6 phpseclib/phpseclib 6 yiisoft/yii2-dev 6 zoujingli/thinkadmin 6 directmailteam/direct-mail 6 icecoder/icecoder 6 yourls/yourls 6 anchorcms/anchor-cms 5 woocommerce/woocommerce 5 typo3/flow 5 symfony/security-bundle 5 illuminate/database 5 codeigniter/framework 5 mautic/core-lib 5 phpxmlrpc/phpxmlrpc 5 symfony/security-core 5 elgg/elgg 5 cachethq/cachet 5 silverstripe/assets 5 neos/flow 5 phpservermon/phpservermon 5 gugoan/economizzer 5 bottelet/flarepoint 5 yeswiki/yeswiki 5 limesurvey/limesurvey 5 ibexa/core 5 neos/neos 5 thinkcmf/thinkcmf 5 kimai/kimai 5 oro/commerce 4 sylius/resource-bundle 4 ibexa/admin-ui 4 bref/bref 4 redaxo/source 4 ezsystems/ezplatform 4 processwire/processwire 4 idno/known 4 zendframework/zendopenid 4 dcat/laravel-admin 4 codeigniter4/shield 4 magento/product-community-edition 4 typo3/cms-frontend 4 evolutioncms/evolution 4 wp-premium/gravityforms 4 typo3/html-sanitizer 4 appwrite/server-ce 4 ezyang/htmlpurifier 4 notrinos/notrinos-erp 4 bytefury/crater 4 shopware/storefront 4 modx/revolution 4 automad/automad 4 friendsofsymfony/user-bundle 4 reportico-web/reportico 4 pyrocms/pyrocms 4 adodb/adodb-php 4 typo3/cms-form 4 wintercms/winter 4 shopxo/shopxo 4 apache-solr-for-typo3/solr 3 symfony/form 3 zendframework/zendrest 3 illuminate/auth 3 zendframework/zendservice-audioscrobbler 3

Filter by Repository

https://github.com/mautic/mautic 5