-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHP| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| mautic/core-lib | composer | >= 1.1.3, < 4.4.13 | 4.4.13 |
| mautic/core-lib | composer | >= 5.0.0-alpha, < 5.1.1 | 5.1.1 |
| mautic/core | composer | >= 1.1.3, < 4.4.13 | 4.4.13 |
| mautic/core | composer | >= 5.0.0-alpha, < 5.1.1 | 5.1.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from code removed in the SecurityController.php's loginAction method, as shown in the commit diff. This code checked for a 'mautic_update' cookie and forwarded requests to upgrade-related AjaxController methods without verifying permissions. The removal of this code in the patch indicates it was the primary vector for unauthorized access to the deprecated UI upgrade process. While the AjaxController methods (updateDatabaseMigration/updateFinalization) were the targets, the root cause was the lack of access control in the loginAction handler that triggered them.
Ongoing coverage of React2Shell