CVE-2022-25777

6.5 mediumEPSS 0.4%

Medium (6.5) in acquia mautic. EPSS 0.4% chance of exploitation in the next 30 days.

Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2024-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

acquia:mautic

References

https://github.com/mautic/mautic/security/advisories/GHSA-mgv8-w49f-822w

Check your stack JSON