What is CVE-2025-5257?

CVE-2025-5257 is a medium-severity vulnerability in Mautic, classified under Improper Validation of Specified Quantity in Input. CVSS score: 6.5/10. Published 2025-05-28.

How severe is CVE-2025-5257?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Mautic

CVE-2025-5257

SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft c…

EPSS: 0.005 (64.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L.

Affected products

Mautic — versions > 4.0

Weakness classification (CWE)

CWE-1284 — Improper Validation of Specified Quantity in Input

References

github.com/mautic/mautic/security/advisories/GHSA-cqx4-9vqf-q3m8

Frequently asked questions

What is CVE-2025-5257?: CVE-2025-5257 is a medium-severity vulnerability in Mautic, classified under Improper Validation of Specified Quantity in Input. CVSS score: 6.5/10. Published 2025-05-28.
How severe is CVE-2025-5257?: Medium severity. CVSS v3 base score is 6.5 out of 10.