Intrusion PreventionAcquia.Mautic.Tracking.Pixel.Stored.XSS
Description
This indicates an attack attempt to exploit a Cross-Site Scripting Vulnerability in Acquia Mautic.
The vulnerability is due to improperly sanitized user metadata collected from tracking pixels. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted data to the target server by interacting with a tracking pixel on an external site. Successful exploitation could result in execution of script code in the security context of target user's browser.
Affected Products
Acquia Mautic prior to 4.3.0
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://github.com/advisories/GHSA-pjpc-87mp-4332
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 51688 |
| Created | Jun 15, 2022 |
| Updated | Jul 04, 2022 |
| Risk |
|
| CVE ID | CVE-2022-25772 |
| Exploit Prediction Score | 0.35% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |