p PatchFirst

CVE-2025-9821

CVE-2025-9821 · SSRF via webhook function

This page contains facts from public vulnerability sources. Check the original advisory before updating.

SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also disclosed DetailsWhen sending webhooks, the destination is not validated, causing SSRF. ImpactBypass of firewalls to interact with internal services. See https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/  for more potential impact. Resources https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html  for more information on SSRF and its fix.

CVSS 2.7 · Low · EPSS 0.3% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • mautic

    Versions
    • ≥ >= 4.4.0, ≤ < 4.4.17: Affected (semver)
    • ≥ >= 5.0.0-alpha, ≤ < 5.2.8: Affected (semver)
    • ≥ >= 6.0.0-alpha, ≤ < 6.0.5: Affected (semver)

    No fix published

  • mautic/core Packagist

    Versions
    • 4.4.0
    • 4.4.1
    • 4.4.10
    • 4.4.11
    • 4.4.12
    • 4.4.13
    • 4.4.2
    • 4.4.3
    • 4.4.4
    • 4.4.5
    • 4.4.6
    • 4.4.7
    • 4.4.8
    • 4.4.9
    Affected ranges
    • ECOSYSTEM: ≥ 4.4.0, < 4.4.17

    Update to 4.4.17

  • mautic/core Packagist

    Versions
    • 5.0.0
    • 5.0.0-alpha
    • 5.0.0-alpha1
    • 5.0.0-beta1
    • 5.0.0-beta2
    • 5.0.0-rc1
    • 5.0.0-rc2
    • 5.0.1
    • 5.0.2
    • 5.0.3
    • 5.0.4
    • 5.1.0
    • 5.1.1
    • 5.2.0
    • 5.2.1
    • 5.2.2
    • 5.2.3
    • 5.2.4
    • 5.2.5
    • 5.2.6
    • 5.2.7
    Affected ranges
    • ECOSYSTEM: ≥ 5.0.0-alpha, < 5.2.8

    Update to 5.2.8

  • mautic/core Packagist

    Versions
    • 6.0.0
    • 6.0.0-alpha
    • 6.0.0-beta2
    • 6.0.0-rc
    • 6.0.1
    • 6.0.2
    • 6.0.3
    • 6.0.4
    Affected ranges
    • ECOSYSTEM: ≥ 6.0.0-alpha, < 6.0.5

    Update to 6.0.5

Original sources

Check your server →