Business and Enterprise Solutions

In Mautic versions >= 1.1.3 a high severity vulnerability CVE-2024-25768 was detected. This vulnerability allows attackers to potentially access sensitive information or execute unauthorized actions within the application, which could result in data breaches or system malfunctions. To fix this issue, users should upgrade Mautic to versions 4.4.13 and 5.1.1. For more details, visit https://nvd.nist.gov/vuln/detail/cve-2024-25768.

In Mautic versions 5.1.0 to 5.1.1 a medium severity vulnerability CVE-2024-47059 was detected. This vulnerability allows attackers to infer whether a username is valid based on differing error messages for incorrect usernames and weak passwords. To fix this issue, users must upgrade to version 5.1.1. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-47059.

In Mautic versions 1.0.0-beta4 to 4.4.11 and 5.0.0-alpha to 5.0.3 a medium severity vulnerability CVE-2022-25777 was detected. This vulnerability allows attackers to read system files and access internal addresses via a Server-Side Request Forgery (SSRF) flaw. To fix this issue, users must upgrade to version 4.4.12 or 5.0.4. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2022-25777.

In versions 2.5.303 of Wiki.js a medium severity vulnerability CVE-2024-45298 was detected. This vulnerability allows attackers to bypass account disabling by requesting a password reset. To fix this issue, all users are advised to upgrade to version 2.5.304, as there are no known workarounds for this vulnerability. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-45298.

In Mautic versions below 1.0.0 and 5.0.0 a low severity vulnerability CVE-2024-47058 was detected. This vulnerability allows attackers with access to edit a Mautic form to insert Cross-Site Scripting into the HTML field, potentially enabling the theft of sensitive information from the user’s current session. To fix this issue, users must upgrade to version 4.4.13, 5.1.1. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-47058.

In Mautic versions below 2.6.0 and 5.0.0 a medium severity vulnerability CVE-2024-47050 was detected. This vulnerability allows attackers to exploit Cross-Site Scripting through the Page URL variable. To fix this issue, users must upgrade to versions 4.4.13 or 5.1.1. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-47050.

In SuiteCRM versions 7.14.4 and 8.6.1 a high severity vulnerability CVE-2024-45392 was detected. This vulnerability allows attackers to delete records via the API due to insufficient access control checks. To fix this issue users must upgrade to versions 7.14.5 and 8.6.2. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-45392.

In Magento’s all versions a medium severity vulnerability CVE-2024-4812 was detected. This vulnerability allows storing malicious JavaScript code in the “Description” field of a user account, which can be executed when opening certain pages like Host Collections. To fix this issue, users must upgrade Magento to the latest version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-4812.

In Magento Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, and 2.4.4-p8 a critical severity vulnerability CVE-2024-34102 was detected. This allows attackers to execute unauthorized code on the server or access sensitive information by sending malicious XML documents, without needing any user interaction. To fix this problem, users should upgrade Magento Adobe Commerce to version 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, and 2.4.4-p9. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-34102.