CVE-2024-2730: Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic
Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2730?
CVE-2024-2730 has a high severity due to the potential exposure of sensitive data through publicly accessible unpublished landing pages.
How do I fix CVE-2024-2730?
Currently, there is no available patch to fix CVE-2024-2730, so affected users should monitor for updates from Mautic.
What data is exposed in CVE-2024-2730?
CVE-2024-2730 can expose sensitive content located in unpublished landing pages accessible through predictable URLs.
Who is affected by CVE-2024-2730?
Users of Mautic are affected by CVE-2024-2730, particularly those utilizing unpublished landing pages.
How can I mitigate risks associated with CVE-2024-2730?
To mitigate risks, users should restrict access to unpublished landing pages and monitor Mautic for future security updates.