CVE-2022-25773: Acquia Mautic

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.

Affected products

• Acquia Mautic: before 5.2.3 (fixed in 5.2.3)

Published 2025-02-26. Last modified 2026-06-17.