CVE-2022-25769: Improper regex in htaccess file
First published: Wed Sep 18 2024(Updated: )
ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path.
Credit: security@mautic.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mautic | <3.3.5 | |
| Mautic | >=4.0.0<4.2.0 |
Remedy
Upgrade to 3.3.5 or 4.2.0. If you're using Mautic in a sub-folder with Apache (e.g. example.com/mautic), please review the guidance in this GitHub issue https://github.com/mautic/mautic/issues/10913#issuecomment-1055681986 before updating, as you will probably need to make some changes to the .htaccess file after you update.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-25769?
CVE-2022-25769 is considered a medium severity vulnerability due to its access restrictions not being correctly enforced.
How do I fix CVE-2022-25769?
To fix CVE-2022-25769, update Mautic to version 4.2.0 or later.
Which versions of Mautic are affected by CVE-2022-25769?
CVE-2022-25769 affects Mautic versions prior to 4.0.0 and between 4.0.0 and 4.2.0.
What happens if I don’t address CVE-2022-25769?
If not addressed, CVE-2022-25769 could allow unauthorized execution of PHP files, leading to potential security breaches.
Is CVE-2022-25769 related to specific file access issues?
Yes, CVE-2022-25769 is related to incorrect regex in the .htaccess file that fails to restrict access properly to certain PHP files.
- agent/remedy
- agent/references
- agent/title
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/acquia
- canonical/mautic
- version/mautic/4.0.0