CVE-2020-35129 Mautic stored Cross-site Scripting (XSS)

What is CVE-2020-35129?

CVE-2020-35129 is a critical cross-site scripting vulnerability in n/a, published on 19 Jan 2021. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow them to eventually perform actions on the target user’s behalf, including changing the user’s password or email address or changing the attacker’s user role from a low-privileged user to an administrator account.

Weakness: CWE-79

Which versions are affected by CVE-2020-35129?

2 open source packages ship an affected version, including mautic/core. It affects 1 product.

Products include Mautic Mautic.

How do I fix CVE-2020-35129?

Upgrade mautic/core to 3.2.4 or later.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2020-35129 being exploited?

There is no known exploitation of CVE-2020-35129 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-8092 CSV Injection vulnerability with exported contact lists in Mautic Critical 9.8
• CVE-2018-10189 Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID High 7.5
• CVE-2017-1000046 Sensitive Cookie Without HttpOnly and Secure Flag High 7.5
• CVE-2018-8071 XSS vulnerability in theme config file in Mautic Medium 6.1
• CVE-2017-1000506 Mautic Cross Site Scripting (XSS) vulnerability Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3px5-wjh3-9x6r.