Unauthorized Access Vulnerability in Mautic by Mautic

CVE-2025-5257

What is CVE-2025-5257?

A vulnerability in Mautic allows unauthenticated users to access unpublished page previews due to the lack of proper authorization checks. This flaw enables these users to view and potentially expose draft content through easily predictable URLs. With search engines possibly indexing these links, sensitive information may inadvertently become public. Mautic has implemented permission checks in updated versions to mitigate this issue, urging users to upgrade to the patched version to ensure security.

References