CVE-2022-25777: Acquia Mautic

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.

Affected products

• Acquia Mautic: from 1.0.1, before 4.4.12 (fixed in 4.4.12); from 5.0.0, before 5.0.4 (fixed in 5.0.4); version 1.0.0 only

Published 2024-09-18. Last modified 2026-06-17.