Junglewise Threat Intelligence

CVE-2018-10189: Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID

CVE-2018-10189 · Severity: low · CVSS 3 · Published 2021-01-19

Technologies: mautic/core (Packagist). Vendors: Packagist.

Executive brief

Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID

Affected products

  • Packagist mautic/core

Related threats