This advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks, leading to potential unauthorized access. The issue stems from an Insecure Direct Object Reference (IDOR) in the cloneAction of the segment management, allowing users to bypass permission restrictions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2024-47055 |
Exploitation
To exploit this vulnerability, an authenticated user can access the segment management functionality and utilize the cloneAction without the necessary permissions. By doing so, they can create unauthorized clones of segments, potentially exposing sensitive data or configurations.
Affected Products
- Mautic Segment Management: Vulnerable due to missing authorization checks in the cloneAction.
Mitigation
To mitigate this vulnerability, it is essential to update Mautic to a version that implements proper authorization checks for the cloneAction within the ListController.php. Additionally, ensure that users attempting to clone segments have the appropriate permissions to create new segments.
References