CVE-2020-35125: XSS
Impact This is a cross-site scripting vulnerability which affects every version of Mautic and could allow an attacker unauthorised administrator level access to Mautic.
This vulnerability was reported by Naveen Sunkavally at Horizon3.ai.
Patches Upgrade to 3.2.4 or 2.16.5.
Link to patch for 2.x versions: https://github.com/mautic/mautic/compare/2.16.4...2.16.5.diff
Link to patch for 3.x versions: https://github.com/mautic/mautic/compare/3.2.2...3.2.4.diff
Workarounds None
For more information If you have any questions or comments about this advisory: Post in https://forum.mautic.org/c/support Email us at security@mautic.org
Other sources
A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different attack method than CVE-2020-35124, but also related to the Referer concept).
Mautic core - Highly Critical - XSS vulnerability leveraged through referrers could allow un-authorized admin access
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-35125?
CVE-2020-35125 is a highly critical cross-site scripting (XSS) vulnerability in the forms component of Mautic before version 3.2.4.
How does CVE-2020-35125 work?
CVE-2020-35125 allows remote attackers to inject executable JavaScript via the mautic parameter, leveraging referrers.
Which versions of Mautic are affected by CVE-2020-35125?
Mautic versions 2.0.0 to 2.16.5, 3.0.0 to 3.2.0, and versions up to 3.2.4 are affected by CVE-2020-35125.
What is the severity of CVE-2020-35125?
CVE-2020-35125 has a severity rating of 9.6 (critical).
How can I fix CVE-2020-35125?
To fix CVE-2020-35125, update your Mautic installation to version 3.2.4 or later.