CVE-2017-1000490
Status: ModifiedMedium (6.5)—
Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.
CVSS
- Version: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Base score: 6.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.40%
- Percentile among all scored CVEs: 72
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- CWE-22
References
Raw JSON (NVD)
Show
{
"id": "CVE-2017-1000490",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2018-01-03T17:29:00.243",
"references": [
{
"url": "https://github.com/mautic/mautic/releases/tag/2.12.0",
"tags": [
"Exploit",
"Release Notes",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://github.com/mautic/mautic/releases/tag/2.12.0",
"tags": [
"Exploit",
"Release Notes",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to."
},
{
"lang": "es",
"value": "Mautic, de la versión 1.0.0 a la 2.11.0, es vulnerable a permitir que cualquier sesión de usuario autorizada de Mautic (debe haber iniciado sesión) utilice el Filemanager para descargar cualquier archivo del servidor al que tenga acceso el usuario web."
}
],
"lastModified": "2026-06-17T00:59:16.023",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:acquia:mautic:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E592D4D5-0E5A-4B39-AC04-088B824D3E73"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7B41915-93B3-4FFE-968A-615D008EA227"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D769331C-B1F6-49BD-A6C2-AC02D3129BD7"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA550469-F69F-4622-926B-FD4A537B21FF"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "425F698F-CCD6-4A05-A31F-5F8BFEF60F84"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66FD252B-7E86-4275-BF02-E33FA91CD5F7"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2FE419F-CE46-4DB2-9581-2DA2E10C2E1A"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0705A45D-2B1C-440D-8019-D404046591F9"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAA5F6FC-DFD2-4E62-B420-25E0ECABE7CE"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.2.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C728C7F3-2C0C-4486-80F4-A9548C535C25"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FF32567-BCCE-4817-A4D9-345D408B9DFE"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "366161CC-8FF1-44B8-A16A-00D2D828AA87"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "996A31B6-3FC4-4347-9BC7-6B0E3252443A"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B17CC51-A2F1-4D54-BAED-12E0578CF59E"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A16DB243-0658-4354-B63C-47BE02F3702B"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F328D42-C524-4B27-A0AD-25A12DE7C506"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC913822-C3C3-42D2-B804-DA960E2DA12A"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A252C2D-156A-4ED7-B0D3-4FC66BC10916"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3570E4D0-3F19-4343-B8D6-570693C231BE"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8183F886-F921-4B41-B4F4-BCADD1D82490"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "821E491B-4306-43D8-9884-D26D557B85C6"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "067FE5C3-BD71-4F6F-9777-9429FBCD2669"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "352CCA25-B7E2-4878-83CD-D444DE1A4D8C"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F537D29E-267F-41DA-A7D6-EAE8F2F1D0B7"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6295440-4EB3-45EE-86B7-A06041580114"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65FE8140-C008-4271-862A-02D8338E7471"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7F69C10-F74A-4399-9665-75C62AF1ABDD"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2343A267-12F1-4720-B548-74201E57CC72"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7CE6166-E6FA-40D7-9EA7-C329DA8396D8"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB0E77CC-1C9E-47A1-A48D-1A098537F1EC"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC4E6411-EF70-4AFA-A5EA-B4B31E3B87FE"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49602924-B1C2-40AB-9711-582B910C5135"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFF326AC-1598-4E5D-9138-74C9BB07D217"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59461408-E345-40BE-8E0F-F6A6963B3815"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "504AFF4D-A70A-4AEB-A4F6-01146BD7DAFB"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.9.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "578537AC-BF31-43D7-B80A-B5AD235882A1"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "477202B1-9A31-4C8A-9B22-B296BC413838"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.10.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF978F65-E884-4814-8C37-38F699720069"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95D68FA7-8E9C-4F94-89AC-05389DB5FC55"
},
{
"criteria": "cpe:2.3:a:acquia:mautic:2.11.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B650408E-4D7E-48C0-AF62-3C79DD5ACD52"
},
{
"criteria": "cpe:2.3:a:mautic:mautic:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31F663D5-2240-41BD-A450-AA6F5C329255"
},
{
"criteria": "cpe:2.3:a:mautic:mautic:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "635041AC-ADB0-4B87-8C0C-DE2CC7E758C3"
},
{
"criteria": "cpe:2.3:a:mautic:mautic:2.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CEC05DD-9E41-4D78-9EDB-F086DFD0FD15"
},
{
"criteria": "cpe:2.3:a:mautic:mautic:2.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6ECE904-F0B8-4194-B35B-1A7404602CA9"
},
{
"criteria": "cpe:2.3:a:mautic:mautic:2.10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09011058-0F31-4D8E-B1BB-3E3DC4437955"
},
{
"criteria": "cpe:2.3:a:mautic:mautic:2.11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1A48919-3F8F-41FC-9831-45766D3C3478"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}