CVE-2021-27916: Mautic/Core - Relative Path Traversal / Arbitrary File Deletion
Summary
CVE-2021-27916: Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builder. Affects mautic/core across 2 version ranges.
>= 3.3.0, < 4.4.12
>= 5.0.0-alpha, < 5.0.4
Fixed in 4.4.12 or 5.0.4, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mautic/Core is an open-source marketing automation software that allows users to manage and automate marketing campaigns. It provides features such as email marketing, lead management, and campaign tracking. However, an issue has been identified in the implementation of the GrapesJS builder in Mautic, which makes it vulnerable to Relative Path Traversal and Arbitrary File Deletion.
Vulnerability Detail
Logged in users of Mautic are susceptible to a Relative Path Traversal and Arbitrary File Deletion vulnerability. This means that regardless of the user's access level, they can delete files outside of the media folders, including critical system files and libraries. The vulnerability arises from the flawed implementation of the GrapesJS builder in Mautic.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 3.3.0, < 4.4.124.4.12composer require mautic/core:4.4.12 -
>= 5.0.0-alpha, < 5.0.45.0.4composer require mautic/core:5.0.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There are no known workarounds for this vulnerability. It is crucial to update Mautic to the patched versions mentioned above.
Conclusion
The Relative Path Traversal and Arbitrary File Deletion vulnerability in Mautic/Core can have severe consequences, allowing logged in users to delete critical files. It is crucial to update Mautic to the patched versions to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mautic/core →
FAQ
The vulnerability allows logged in users to delete files outside of the media folders, potentially leading to the deletion of critical system files or libraries.
Users of Mautic versions prior to 4.4.12 and 5.0.4 are affected by this vulnerability.
There are no known exploits for this vulnerability at the moment.
No, this vulnerability can only be exploited by logged in users of Mautic.
Yes, updating Mautic to version 4.4.12 or 5.0.4 will fix this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for mautic/core.
