CVE-2018-10189

An issue was discovered in Mautic 1.x and 2.x before 2.13.0

published April 17, 2018

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01136 · 66.1th percentile
Published
2018-04-17T20:00Z
EPSS history
Timeline
  • 17 APR 20:00Z
    An issue was discovered in Mautic 1.x and 2.x before 2.13.0
    cvelistv5