Mautic Secret Data Extraction Vulnerability for Administrators

A vulnerability exists in Mautic versions 4.4.0 prior to 4.4.17, 5.0.0-alpha through 5.2.8, and 6.0.0-alpha through 6.0.5. It allows administrators to modify application configurations and access sensitive information, such as database credentials, that is typically restricted.

Impact

Exploitation of this vulnerability enables unauthorized disclosure of confidential data, including database credentials, to administrators who would not normally have access to such information.

Remediation

Users can upgrade to Mautic versions 4.4.17, 5.2.8, or 6.0.5 to address this vulnerability.