~/products/mautic/grapes-js-builder-bundle

pipeline liveDigest Docs

Mautic Grapes-Js-Builder-Bundle vulnerabilities

1 known vulnerability affecting mautic/grapes-js-builder-bundle.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2025-13827P3HIGH≥ 4.0.0, < 4.4.18≥ 5.0.0, < 5.2.9+1 more2025-12-02

CVE-2025-13827 [HIGH] CWE-434 GrapesJsBuilder File Upload allows all file uploads GrapesJsBuilder File Upload allows all file uploads ### Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ### Impact If the media folder is not restricted from running files this can lead to a remote code execution.

Mautic Grapes-Js-Builder-Bundle vulnerabilities | cvebase