What’s Vulnerable › Vulnerabilities

CVE-2024-2730: Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-10 · updated 2026-06-17
• Weakness: CWE-425

Description

Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available

Affected products

• Mautic: through 4.4.9

References

• https://huntr.com/bounties/cd3321a4-9ebc-48fa-8d4c-b5720089c2d9
• https://huntr.com/bounties/cd3321a4-9ebc-48fa-8d4c-b5720089c2d9

Get alerted when CVE-2024-2730 or the next vulnerability affects your stack