MEDIUM Mautic Vulnerability Alert

This advisory addresses a security vulnerability in Mautic related to the ‘Forget your password’ functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames through a timing attack. Differences in response times for existing and non-existing users allow attackers to determine the existence of usernames.

Details

Exploitation
To exploit this vulnerability, an attacker can use the ‘Forget your password’ functionality to send requests for both valid and invalid usernames. By measuring the response times, the attacker can determine which usernames exist in the system based on the differences in response times.

Affected Products

• Mautic: The ‘Forget your password’ functionality is vulnerable, allowing for user enumeration through timing attacks.

Mitigation
To mitigate this vulnerability, it is recommended to update to a version of Mautic that normalizes password reset responses, ensuring that they respond at the same time regardless of whether the user exists or not.

References

• Mautic Security Advisory