CVE-2022-25775 — SQL Injection in dynamic Reports
Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sens…
Published: 2024-09-18 · CVSS: 6.6 · CVSS 3.1
Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7