CVE-2018-10189
published 2018-04-17CVE-2018-10189: An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact…
PriorityP334high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
1.18%
63.7th percentile
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mautic | core | >= 0 < 2.13.0 | 2.13.0 |
| mautic | mautic | 1.0.0 – 1.4.1 | — |
| mautic | mautic | >= 2.0.0 < 2.13.0 | 2.13.0 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
osv·2021-01-19
CVE-2018-10189 [HIGH] Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
### Impact
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.
### Patches
Update to 2.13.0 or later
### Workarounds
None
### For more information
If you have any questions or comments about this advisory:
* Email us at [[email protected]](mailto:[email protected])
GHSA
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
ghsa·2021-01-19
CVE-2018-10189 [HIGH] CWE-200 Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
### Impact
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.
### Patches
Update to 2.13.0 or later
### Workarounds
None
### For more information
If you have any questions or comments about this advisory:
* Email us at [[email protected]](mailto:[email protected])
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-04-17
Published