VulnerabilityDeferred

CVE-2025-9822

ImpactAn administrator who usually does not have access to certain parameters, such as database credentials, can disclose them.

MEDIUM 5.5EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available. ImpactAn administrator who usually does not have access to certain parameters, such as database credentials, can disclose them.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
EPSS: 0.24% probability · 15th percentile
CISA KEV: Not listed
Weakness: CWE-283
Source: security@mautic.org

References

https://github.com/mautic/mautic/security/advisories/GHSA-438m-6mhw-hq5w

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.