CSV Injection vulnerability with exported contact lists in Mautic

概要

参考情報

• mautic/mautic security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2018-8092 · ADVISORY
• mautic/mautic commit cbc49f0 · WEB
• mautic/mautic release 2.13.0 · WEB

mautic/core のその他の脆弱性

• CVE-2026-9811中 5.4A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for a…
• CVE-2026-9809高 7.6A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on…
• CVE-2026-9808高 7.1An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles conf…
• CVE-2026-9559緊急 9.9A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports…
• CVE-2026-9558緊急 9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without …