CVE-2025-9822: Mautic Core Vulnerable to Secret Data Extraction via elfinder
Summary
CVE-2025-9822: Mautic vulnerable to secret data extraction via elfinder. Affects mautic/core across 3 version ranges.
>= 4.4.0, < 4.4.17
>= 5.0.0-alpha, < 5.2.8
>= 6.0.0-alpha, < 6.0.5
Fixed in 4.4.17, 5.2.8 or 6.0.5, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mautic is an open-source marketing automation platform that enables businesses to manage and automate their marketing campaigns. It provides features such as email marketing, landing pages, and lead management. The core package, 'mautic/core', is essential for the functionality of the Mautic application. However, it has been identified to have a vulnerability that allows users with administrator rights to access sensitive configuration data, including secrets that are typically restricted.
Vulnerability Detail
The vulnerability arises from improper access controls within the Mautic application, specifically related to the elfinder file manager. An administrator, who normally should not have access to certain sensitive parameters, can exploit this flaw to disclose critical information such as database credentials. This could lead to unauthorized access and potential data breaches, making it a significant security concern.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.4.0, < 4.4.174.4.17composer require mautic/core:4.4.17 -
>= 5.0.0-alpha, < 5.2.85.2.8composer require mautic/core:5.2.8 -
>= 6.0.0-alpha, < 6.0.56.0.5composer require mautic/core:6.0.5
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, restrict administrator access to sensitive configuration settings until the package can be updated. This can be done by reviewing user roles and permissions within the Mautic application settings.
Conclusion
The Mautic core package has a vulnerability that allows unauthorized access to sensitive configuration data by users with administrator rights. It is crucial to update to the patched versions to mitigate this risk and ensure the security of your application.
See every vulnerability recorded for mautic/core →
FAQ
CVE-2025-9822 is a vulnerability in the Mautic core package that allows administrators to access sensitive configuration data.
If exploited, this vulnerability can lead to unauthorized access to sensitive information, such as database credentials, which can compromise your application.
Versions 4.4.0 to 4.4.16, 5.0.0-alpha to 5.2.7, and 6.0.0-alpha to 6.0.4 are affected by this vulnerability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The CVSS score of this vulnerability is 5.5, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for mautic/core.
