Mautic Web Installer Scanner

Mautic is an open-source marketing automation platform used by marketing teams and enterprises to manage campaigns, contacts, and lead scoring. It runs on web servers and is configured by administrators to streamline email marketing, social media, and customer engagement. The platform's flexibility and integration capabilities make it a popular choice for data-driven marketing strategies.

The vulnerability known as Installation Page Exposure occurs when Mautic's installation or setup pages remain accessible after initial deployment. This typically arises from misconfigured server settings or failure to remove or secure the installation directory post-setup. Attackers can exploit this to reinitialize the application, potentially overwriting existing configurations.

Technically, the scanner targets the /installer or /setup endpoints of Mautic installations. These pages often contain forms for database configuration, admin credentials, and other sensitive settings. If left exposed, an attacker can submit these forms to reset the application, gaining control over the environment.

If exploited, an attacker could reconfigure Mautic to point to a malicious database, intercept marketing data, or inject backdoors. This could lead to data breaches, loss of customer trust, and significant operational disruption. The high CVSS score of 8.0 reflects the severe impact on confidentiality, integrity, and availability.