This advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of sensitive information, including database credentials, API keys, and other critical system configurations. The .env file, which typically contains environment variables and sensitive application configurations, is directly accessible due to missing web server configurations.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2024-47056 |
Exploitation
An unauthenticated attacker can exploit this vulnerability by simply navigating to the URL of the .env file in a web browser. This allows them to view sensitive information contained within the file, such as database credentials and API keys, without needing any special privileges or user interaction.
Affected Products
- Mautic: The application itself is affected due to the exposure of its .env configuration files.
Mitigation
To mitigate this vulnerability, update Mautic to the latest version. Ensure that your web server is configured to restrict access to .env files. For Apache users, make sure .htaccess files are respected. For Nginx users, add a configuration block to deny access to .env files and reload the Nginx service.
References