« Volver al listado

CVE-2021-27912

Estado: ModificadaMedia (5.4)—

Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Acquia — Mautic

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-27912",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@mautic.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "security@mautic.org",
      "affectedData": [
        {
          "vendor": "Mautic",
          "product": "Mautic",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "3.3.4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "4.0.0",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-08-30T16:15:07.403",
  "references": [
    {
      "url": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "security@mautic.org"
    },
    {
      "url": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@mautic.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets."
    },
    {
      "lang": "es",
      "value": "Mautic versiones anteriores a 3.3.4/4.0.0, son vulnerables a un ataque de tipo JS XSS en línea cuando se visualizan activos de Mautic al usar JS en línea en el título y añadiendo una URL de imagen rota como activo remoto. Esto sólo puede ser aprovechado por un usuario autenticado con permiso para crear o editar activos."
    }
  ],
  "lastModified": "2026-06-17T03:45:36.253",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA7B8AF8-5929-4515-9EFF-9F589FA3FFDC",
              "versionEndExcluding": "3.3.4"
            },
            {
              "criteria": "cpe:2.3:a:acquia:mautic:4.0.0:alpha1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4B8FCED-A690-45D0-ACE1-871ADA2080F3"
            },
            {
              "criteria": "cpe:2.3:a:acquia:mautic:4.0.0:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14D56FFE-E768-4502-BA7E-6B34BFE463B4"
            },
            {
              "criteria": "cpe:2.3:a:acquia:mautic:4.0.0:rc:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C536B44B-C713-47D1-9EBD-E2D94CB0561E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@mautic.org"
}