https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 10:36:23 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-09761 cnvd-2018-09761 https://cve.radiocsirt.org/vuln/cnvd-2018-09761 https://cve.radiocsirt.org/vuln/euvd-2026-178160 EUVD-2026-178160 https://cve.radiocsirt.org/vuln/euvd-2026-178160 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10189 <p>An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.</p> <p>An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10189 https://cve.radiocsirt.org/vuln/ghsa-vfxj-qg93-7wwc <p><strong>Affected:</strong> Packagist: mautic/core</p> <p>### Impact An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.</p> <p>### Patches Update to 2.13.0 or later</p> <p>### Workarounds None</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)</p> <p><strong>Affected:</strong> Packagist: mautic/core</p> <p>### Impact An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.</p> <p>### Patches Update to 2.13.0 or later</p> <p>### Workarounds None</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)</p> https://cve.radiocsirt.org/vuln/ghsa-vfxj-qg93-7wwc https://cve.radiocsirt.org/vuln/gsd-2018-10189 gsd-2018-10189 https://cve.radiocsirt.org/vuln/gsd-2018-10189