CVE-2021-27908 Mautic vulnerable to secret data exfiltration via symfony parameters
An authorized admin can expose sensitive database credentials by injecting Symfony parameter syntax into public configuration fields.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-27908?
CVE-2021-27908 is a medium-severity vulnerability in Mautic, published on 23 Mar 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter syntax in any of the free text fields in Mautic’s configuration that are used in publicly facing parts of the application.
Which versions are affected by CVE-2021-27908?
2 open source packages ship an affected version, including mautic/core. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mautic/core Packagist | All versions | 3.3.2 |
mautic/core Packagist | All versions | 3.3.2 |
Products include Acquia Mautic.
How do I fix CVE-2021-27908?
Upgrade mautic/core to 3.3.2 or later.
Is CVE-2021-27908 being exploited?
There is no known exploitation of CVE-2021-27908 in the wild and no public exploit code.
Other vulnerabilities in Mautic
- CVE-2022-25772 Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
- CVE-2020-35125 Mautic is vulnerable to XSS vulnerability
- CVE-2020-35124 XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic
- CVE-2024-47051 Remote Code Execution & File Deletion in Asset Uploads
- CVE-2020-35128 Mautic stored Cross-site Scripting (XSS)
Sources
Also known as GHSA-4hjq-422q-4vpx.