Missing Authentication for Critical Function (CWE-306)
Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable
Detection for the vulnerability has been added to Qualys (5001016)
Feedly found the first article mentioning CVE-2024-47051. See article
Feedly estimated the CVSS score as MEDIUM