Incorrect Regular Expression in .htaccess File Can Allow Code Execution

CVE-2022-25769

Summary

The vulnerability arises from an issue with the default configuration of the .htaccess file in Mautic. The file is designed to restrict access to certain PHP files; however, the implemented logic is flawed. Specifically, the regex pattern in the FilesMatch directive only validates the filename and does not account for the full path to the PHP files. This oversight can lead to unintended access to restricted PHP files, potentially compromising the integrity and confidentiality of the application.

References