What is CVE-2024-2730?

CVE-2024-2730 is a medium-severity vulnerability in Mautic, classified under Direct Request (Forced Browsing). CVSS score: 5.3/10. Published 2024-04-10.

How severe is CVE-2024-2730?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2024-2730 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Mautic

CVE-2024-2730

Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is avail…

EPSS: 0.005 (39.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Mautic — versions 0

Weakness classification (CWE)

CWE-425 — Direct Request (Forced Browsing)

Public proof-of-concept exploits

ZHAW-Infosec-Research-Group/A2CT

References

vulnerability@ncsc.ch (exploit)

Frequently asked questions

What is CVE-2024-2730?: CVE-2024-2730 is a medium-severity vulnerability in Mautic, classified under Direct Request (Forced Browsing). CVSS score: 5.3/10. Published 2024-04-10.
How severe is CVE-2024-2730?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2024-2730 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.