Vulnerability · Published Apr 10, 2024 · Assigned by NCSC.ch
CVE-2024-2730Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic
Medium 5.3
In plain English
A medium-severity security flaw in Mautic from Mautic. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 53.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available
Affected products (as reported)
Weakness: CWE-425 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N