Most recent entries from all

EUVD-2026-222263

2026-10-02T15:30:45.690379+00:00

EUVD-2026-222263

fkie_cve-2022-25773

2026-10-02T15:30:45.690413+00:00

This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.

* Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.

GHSA-4w2w-36vm-c8hf — Mautic allows Relative Path Traversal in assets file upload

2026-10-02T15:30:45.690448+00:00

Affected: Packagist: mautic/core

### Summary

This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.

* **Improper Limitation of a Pathname to a Restricted Directory:** A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.

### Mitigation

Please update to 5.2.3 or later.

### Workarounds

None

### References

If you have any questions or comments about this advisory:

Email us at [security@mautic.org](mailto:security@mautic.org)

gsd-2022-25773

2026-10-02T15:30:45.690482+00:00

gsd-2022-25773