4.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2024-47055

CVE-2024-47055: Mautic segment cloning doesn't have a proper permission check

Summary

This advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks.

Insecure Direct Object Reference (IDOR) / Missing Authorization: A missing authorization vulnerability exists in the cloneAction of the segment management. This allows an authenticated user to bypass intended permission restrictions and clone segments even if they lack the necessary permissions to create new ones.

Mitigation

Update Mautic to a version that implements proper authorization checks for the cloneAction within the ListController.php. Ensure that users attempting to clone segments possess the appropriate creation permissions.

Workarounds

None

If you have any questions or comments about this advisory: Email us at security@mautic.org

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2024-47055

CVE-2024-47055:

4.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
mautic/core	composer	>= 5.0.0-alpha, < 5.2.6	5.2.6
mautic/core	composer	>= 6.0.0-alpha, < 6.0.2	6.0.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, identified as GHSA-vph5-ghq3-q782 and CVE-2024-47055, is an Insecure Direct Object Reference (IDOR) / Missing Authorization issue within Mautic's segment cloning functionality. The core of the problem lies in the cloneAction method located in app/bundles/LeadBundle/Controller/ListController.php. This method, prior to patching, failed to verify if the authenticated user possessed the necessary permissions (specifically, the permission to create segments, typically lead:lists:create) before proceeding with the cloning operation. As a result, any authenticated user, regardless of their assigned privileges for segment creation, could successfully clone any segment they had access to view, effectively bypassing the intended access controls. The exploit would involve an authenticated user making a request to the endpoint handled by cloneAction for a specific segment. The cloneAction function would then be executed, and due to the missing authorization check, it would proceed to duplicate the segment. A runtime profile during such an exploit would show Mautic\LeadBundle\Controller\ListController::cloneAction in the stack trace as the function directly responsible for the unauthorized action. The patch for this vulnerability involves introducing a security check at the beginning of the cloneAction method to ensure the user has the lead:lists:create permission before allowing the cloning operation to proceed.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

4.3

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2024-47055: Mautic segment cloning doesn't have a proper permission check

Summary

Mitigation

Workarounds

CVE-2024-47055:

4.3

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

4.3

4.3

CVE-2024-47055: Mautic segment cloning doesn't have a proper permission check

Summary

Mitigation

Workarounds

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI