Unauthorized Access Vulnerability in Mautic by Mautic
CVE-2025-5257
6.5MEDIUM
What is CVE-2025-5257?
A vulnerability in Mautic allows unauthenticated users to access unpublished page previews due to the lack of proper authorization checks. This flaw enables these users to view and potentially expose draft content through easily predictable URLs. With search engines possibly indexing these links, sensitive information may inadvertently become public. Mautic has implemented permission checks in updated versions to mitigate this issue, urging users to upgrade to the patched version to ensure security.
Affected Version(s)
Mautic > 4.0
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Lenon Leite
John Linhart
Zdeno Kuzmany
Lenon Leite