Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-9822

Fixed upstream EPSS <1%CVSS 5.5

SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available. ImpactAn administrator who usually does not have access to certain parameters, such as database credentials, can disclose them.

Published 2025-09-03 · CVE record · OSV

Products: Mautic

Fixed upstream

EcosystemPackageFixed in
Packagistmautic/core4.4.17
Packagistmautic/core5.2.8
Packagistmautic/core6.0.5