ГлавнаяУязвимости → CVE-2021-27915
7.6высокая

CVE-2021-27915

Описание

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions. This could lead to the user having elevated access to the system.

Затрагиваемое ПО
Acquia Mautic
CVSS
Балл7.6 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Источники
https://github.com/mautic/mautic/security/advisories/GHSA-2rc5-2755-v422