{"id":"CVE-2025-13828","aliases":[],"url":"https://o3.security/vulnerability/CVE-2025-13828","summary":"SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update…","details":"SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.\n\nImpactA low-privileged user of the platform can install malicious code to obtain higher privileges.","published":"2025-12-02T17:16:04.080","modified":"2026-06-17T08:34:50.433","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://github.com/mautic/mautic/security/advisories/GHSA-3fq7-c5m8-g86x"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T08:34:50.433"}}