最初の3歩 準備中。当サイトではまだ手順を確かめられていません。配布元のページをご覧ください。
やめるときは導入した担当者に依頼
ライセンスの説明は要約です。法的助言ではありません。スターとは、GitHub の「いいね」に近い評価の数です。
安全性の表示は推定で、監査ではありません。ソフトは公開されている検査結果と脆弱性の報告、更新の止まり具合から判断しています。スキルは配布元の説明文からの推定で、配布物の中身（SKILL.md や同梱のプログラム）まではまだ検査できていません。「重大な問題は見つからず」は、問題が無いことの証明ではありません。軽い指摘が付いていることもあります。小さなプロジェクトや新しいスキルは低めに出ます。
| CVE ID | 重要度 | 状態 | 概要 |
|---|---|---|---|
| CVE-2026-9811 | Medium | published | Stored Cross-Site Scripting (XSS) in Project Option Selector |
| CVE-2026-9808 | High | published | Authorization Bypass in API v2 Endpoints |
| CVE-2026-9809 | High | published | Stored Cross-Site Scripting (XSS) in Projects Component |
| CVE-2026-9558 | Critical | published | Server-Side Template Injection (SSTI) in Theme Templates |
| CVE-2026-9559 | Critical | published | Path Traversal via Campaign Import |
| CVE-2026-4776 | High | published | SQL Injection in API Contact Filtering |
| CVE-2026-3105 | High | published | SQL Injection in Contact Activity API Sorting |
| CVE-2026-9557 | Medium | published | SSRF in the Mautic Focus component |
| CVE-2025-13828 | Critical | published | Mautic user without privileged access to the Marketplace can install and uninstall composer packages |
| CVE-2025-13827 | High | published | GrapesJsBuilder File Upload allows all file uploads |
| CVE-2025-9823 | Medium | published | Reflected XSS in lead:addLeadTags - Quick Add |
| CVE-2025-5256 | Medium | published | Open Redirect vulnerability on user unlock path. |
| CVE-2024-47051 | Critical | published | Remote Code Execution & File Deletion in Asset Uploads |
| CVE-2024-47055 | Medium | published | Segment cloning doesn't have a proper permission check |
| CVE-2024-47059 | Medium | published | Users enumeration - weak password login |
| CVE-2024-47057 | Medium | published | User name enumeration possible due to response time difference on password reset form |
| CVE-2024-47050 | High | published | XSS in contact/company tracking (no authentication) |
| CVE-2022-25773 | Medium | published | Relative Path Traversal in assets file upload |
| CVE-2024-47053 | High | published | Improper Authorization in Reporting API |
| CVE-2021-27917 | High | published | XSS in contact tracking and page hits report |
| CVE-2025-9822 | Medium | published | Secret data extraction via elfinder |
| CVE-2021-27915 | High | published | XSS Cross-site Scripting Stored (XSS) - Description field |
| CVE-2022-25776 | High | published | Sensitive Data Exposure due to inadequate user permission settings |
| CVE-2025-5257 | Medium | published | Predictable Page Indexing Might Lead to Sensitive Data Exposure |
| CVE-2024-47056 | Medium | published | Mautic does not shield .env files from web traffic |
| CVE-2025-9821 | low | published | SSRF via webhook function |
| CVE-2022-25774 | Medium | published | XSS in Notifications via saving Dashboards |
| CVE-2022-25777 | Medium | published | Server-Side Request Forgery in Asset section |
| CVE-2024-47058 | low | published | Cross-site Scripting (XSS) - stored (edit form HTML field) |
| CVE-2025-9824 | Medium | published | User Enumeration via Response Timing |
| 公開された日 | 2013/08/19 |
| 最後に手が入った日 | 2026/02/24 |
| 当サイトが見つけた日 | 2026/02/24 |
| 日付 | スター数 | フォーク数 |
|---|---|---|
| 2026-02-24 | 9,232 | 3,167 |
| 2026-02-24 | 9,235 | 3,168 |
| 2026-02-24 | 9,235 | 3,168 |
| 2026-02-25 | 9,235 | 3,169 |
| 2026-02-25 | 9,235 | 3,169 |
| 2026-02-25 | 9,235 | 3,169 |