{"id":"GHSA-7vvh-xqq4-w777","aliases":["CVE-2017-8874"],"title":"Mautic Cross-Site Request Forgery (CSRF)","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.","severity":"high","score":8.8,"published":"2022-05-13T01:12:01.000Z","modified":"2024-04-23T23:26:47.590Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"mautic/core","ranges":[],"versions":["1.4.1"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-8874","https://github.com/mautic/mautic/issues/3486","https://github.com/mautic/mautic"],"sources":[{"name":"OSV","id":"GHSA-7vvh-xqq4-w777","modified":"2024-04-23T23:26:47.590565Z","url":"https://osv.dev/vulnerability/GHSA-7vvh-xqq4-w777"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":8.8}]}