https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:47:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-186572 EUVD-2026-186572 https://cve.radiocsirt.org/vuln/euvd-2026-186572 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25769 <p>ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application.</p> <p>This logic isn&#39;t correct, as the regex in the second FilesMatch only checks the filename, not the full path.</p> <p>ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application.</p> <p>This logic isn&#39;t correct, as the regex in the second FilesMatch only checks the filename, not the full path.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25769 https://cve.radiocsirt.org/vuln/ghsa-mj6m-246h-9w56 <p><strong>Affected:</strong> Packagist: mautic/core</p> <p>### Impact the default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application.</p> <p>This logic isn&#39;t correct, as the regex in the second FilesMatch only checks the filename, not the full path.</p> <p>### Patches Please upgrade to 3.3.5 or 4.2.0</p> <p>### Workarounds No</p> <p>### References</p> <p>- Release post: https://www.mautic.org/blog/community/mautic-4-2-one-small-step-mautic - Internally tracked under MST-32</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)</p> <p><strong>Affected:</strong> Packagist: mautic/core</p> <p>### Impact the default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application.</p> <p>This logic isn&#39;t correct, as the regex in the second FilesMatch only checks the filename, not the full path.</p> <p>### Patches Please upgrade to 3.3.5 or 4.2.0</p> <p>### Workarounds No</p> <p>### References</p> <p>- Release post: https://www.mautic.org/blog/community/mautic-4-2-one-small-step-mautic - Internally tracked under MST-32</p> <p>### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)</p> https://cve.radiocsirt.org/vuln/ghsa-mj6m-246h-9w56 https://cve.radiocsirt.org/vuln/gsd-2022-25769 gsd-2022-25769 https://cve.radiocsirt.org/vuln/gsd-2022-25769