CVE-2024-47055
Mautic segment cloning doesn't have a proper permission check
Impact
### Summary This advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks. Insecure Direct Object Reference (IDOR) / Missing Authorization: A missing authorization vulnerability exists in the `cloneAction` of the segment management. This allows an authenticated user to bypass intended permission restrictions and clone segments even if they lack the necessary permissions to create new ones. ### Mitigation Update Mautic to a version that implements proper authorization checks for the `cloneAction` within the `ListController.php`. Ensure that users attempting to clone segments possess the appropriate creation permissions. ### Workarounds None If you have any questions or comments about this advisory: Email us at security@mautic.org
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | mautic/core | >= 5.0.0-alpha, < 5.2.6 | 5.2.6 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acquia | Mautic | from 5.0.0 before 5.2.6 from 6.0.0 before 6.0.2 |