CVE-2022-25773: This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitation of…

PriorityP431medium5.4CVSS 3.1

AVNACLPRLUINSUCNILAL

EPSS

0.54%

41.1th percentile

This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.

* Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
acquia	mautic	< 5.2.3	5.2.3
mautic	core	>= 0 < 5.2.3	5.2.3
mautic	mautic_core	< 5.2.3	5.2.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.