{"id":"CVE-2017-8874","aliases":["GHSA-7vvh-xqq4-w777"],"url":"https://o3.security/vulnerability/CVE-2017-8874","summary":"Mautic Cross-Site Request Forgery (CSRF)","details":"Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.","published":"2017-05-10T05:29:00.317Z","modified":"2026-08-07T14:53:45.848385Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"mautic/core","fixedVersion":null}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/mautic/mautic/issues/3486"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T14:53:45.848385Z"}}