Mautic Timing Attack Vulnerability Allowing User Enumeration

A vulnerability in Mautic's login process can be exploited to enumerate valid usernames. This issue arises from inconsistent response times when processing login requests. A valid username triggers password hashing, while an invalid one does not, creating a timing difference that attackers can exploit. Once valid usernames are identified, attackers could attempt brute-force attacks. This vulnerability affects Mautic versions 4.4.0 through 4.4.16, 5.0.0-alpha through 5.2.7, and 6.0.0-alpha through 6.0.4.

Impact

Exploitation of this vulnerability allows attackers to enumerate valid usernames, potentially leading to brute-force attacks on user accounts.

Remediation

Users should upgrade to Mautic versions 4.4.17, 5.2.8, or 6.0.5, all of which include the necessary patch. Instructions for upgrading can be found in the Mautic documentation.