CVE-2022-25769
Published: 18 September 2024
Summary
CVE-2022-25769 is a high-severity Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability in Acquia Mautic. Its CVSS base score is 7.2 (High).
Operationally, ranked at the 30.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-1482
Vulnerability details
ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only…
more
checks the filename, not the full path.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.