CVE-2018-8071: XSS
Impact Mautic before v2.13.0 has stored XSS via a theme config file.
Patches Update to 2.13.0 or later.
Workarounds None.
For more information If you have any questions or comments about this advisory: Email us at security@mautic.org
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/mautic/coreto a version that resolves this vulnerability.Fixed in 2.13.0 - Upgrade
Upgrade
mauticto a version that resolves this vulnerability.Fixed in 2.13.0
Event History
Frequently Asked Questions
What is CVE-2018-8071?
CVE-2018-8071 refers to a vulnerability in Mautic before v2.13.0 that allows for stored cross-site scripting (XSS) attacks via a theme config file.
What is the impact of CVE-2018-8071?
The impact of CVE-2018-8071 is that it allows for stored XSS attacks, which can lead to unauthorized access, data theft, and potentially further exploitation of the affected system.
How can I patch against CVE-2018-8071?
To patch against CVE-2018-8071, update Mautic to version 2.13.0 or later.
Are there any workarounds for CVE-2018-8071?
No, there are no known workarounds for CVE-2018-8071.
Where can I find more information about CVE-2018-8071?
You can find more information about CVE-2018-8071 in the Mautic security advisories and NIST vulnerability database, as well as the associated GitHub commit.