N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-13827

CVE-2025-13827: GrapesJsBuilder File Upload allows all file uploads

Summary

Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.

Impact

If the media folder is not restricted from running files this can lead to a remote code execution.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-13827

CVE-2025-13827:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
mautic/grapes-js-builder-bundle	composer	>= 4.0.0, < 4.4.18	4.4.18
mautic/grapes-js-builder-bundle	composer	>= 5.0.0, < 5.2.9	5.2.9
mautic/grapes-js-builder-bundle	composer	>= 6.0.0, < 6.0.7	6.0.7

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists due to unrestricted file uploads in two separate parts of the Mautic application: the legacy editor and the GrapesJS builder. In both cases, the backend code responsible for handling file uploads failed to properly validate the types of files being uploaded. An attacker could upload a file with a dangerous extension (e.g., '.php'), which could lead to remote code execution if the server was configured to execute files from the upload directory.

The patch addresses this by introducing a centralized and stricter validation mechanism in the Mautic\CoreBundle\Helper\FileUploader class. A new validateImage method was added, which checks both the file's MIME type and its extension against a configurable allowlist. This new validation method is now called from both the legacy FileController::uploadAction and the GrapesJS FileManager::uploadFiles helper, ensuring that only allowed image files can be uploaded through either editor.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.