{"containers": {"cna": {"affected": [{"product": "Mautic", "vendor": "Mautic", "versions": [{"lessThan": "3.3.4", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "4.0.0", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Reported by Hoang Nguyen https://github.com/MatisAct, Fixed by Rohit Pavaskar https://github.com/rohitp19"}], "datePublic": "2021-08-30T00:00:00", "descriptions": [{"lang": "en", "value": "Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Contact first and last name can be populated from different sources such as UI, API, 3rd party syncing, forms, etc."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Cross-site Scripting (XSS)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-08-30T15:55:12", "orgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e", "shortName": "Mautic"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/mautic/mautic/security/advisories/GHSA-72hm-fx78-xwhc"}], "source": {"defect": ["MST-15"], "discovery": "EXTERNAL"}, "title": "XSS vulnerability on contacts view", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@mautic.org", "DATE_PUBLIC": "2021-08-30T14:06:00.000Z", "ID": "CVE-2021-27911", "STATE": "PUBLIC", "TITLE": "XSS vulnerability on contacts view"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Mautic", "version": {"version_data": [{"version_affected": "<", "version_value": "3.3.4"}, {"version_affected": "<", "version_value": "4.0.0"}]}}]}, "vendor_name": "Mautic"}]}}, "credit": [{"lang": "eng", "value": "Reported by Hoang Nguyen https://github.com/MatisAct, Fixed by Rohit Pavaskar https://github.com/rohitp19"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Contact first and last name can be populated from different sources such as UI, API, 3rd party syncing, forms, etc."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-79 Cross-site Scripting (XSS)"}]}]}, "references": {"reference_data": [{"name": "https://github.com/mautic/mautic/security/advisories/GHSA-72hm-fx78-xwhc", "refsource": "MISC", "url": "https://github.com/mautic/mautic/security/advisories/GHSA-72hm-fx78-xwhc"}]}, "source": {"defect": ["MST-15"], "discovery": "EXTERNAL"}}}}, "cveMetadata": {"assignerOrgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e", "assignerShortName": "Mautic", "cveId": "CVE-2021-27911", "datePublished": "2021-08-30T00:00:00", "dateReserved": "2021-03-02T00:00:00", "dateUpdated": "2021-08-30T15:55:12", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*", "matchCriteriaId": "EA7B8AF8-5929-4515-9EFF-9F589FA3FFDC", "versionEndExcluding": "3.3.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:acquia:mautic:4.0.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "A4B8FCED-A690-45D0-ACE1-871ADA2080F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:acquia:mautic:4.0.0:beta:*:*:*:*:*:*", "matchCriteriaId": "14D56FFE-E768-4502-BA7E-6B34BFE463B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:acquia:mautic:4.0.0:rc:*:*:*:*:*:*", "matchCriteriaId": "C536B44B-C713-47D1-9EBD-E2D94CB0561E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Contact first and last name can be populated from different sources such as UI, API, 3rd party syncing, forms, etc."}, {"lang": "es", "value": "Mautic versiones anteriores a 3.3.4/4.0.0, son vulnerables a un ataque de tipo inline JS XSS mediante el nombre o el apellido del contacto y es desencadenado cuando se visualiza la p\u00e1gina de detalles de un contacto y luego se hace clic en el desplegable de acciones y se pasa por encima del bot\u00f3n Campa\u00f1as. El nombre y los apellidos de los contactos pueden provenir de diferentes fuentes, como la interfaz de usuario, la API, la sincronizaci\u00f3n de terceros, los formularios, etc."}], "id": "CVE-2021-27911", "lastModified": "2021-09-10T15:04:00.827", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 6.0, "source": "security@mautic.org", "type": "Secondary"}]}, "published": "2021-08-30T16:15:07.347", "references": [{"source": "security@mautic.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/mautic/mautic/security/advisories/GHSA-72hm-fx78-xwhc"}], "sourceIdentifier": "security@mautic.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@mautic.org", "type": "Secondary"}]}

{}