Logged-in users at risk of SQL injection vulnerability in Mautic Reports bundle

CVE-2022-25775

Summary

Logged-in users of Mautic are exposed to a significant security risk due to an SQL injection vulnerability in the Reports bundle. This flaw allows attackers to retrieve and potentially alter sensitive information stored in the database. Depending on the user's database permissions, an unauthorized individual could even manipulate the file system, leading to further exploitation of the system. It is crucial for organizations utilizing Mautic to apply the latest patches to mitigate these security risks.

References