This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2022-25769 | BDVDB-2026-248692 Detail

MauticMautic

Description#

ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact high. Attack vector: local.

Weaknesses#

  • CWE-1284 Improper Validation of Specified Quantity in Input

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.