CVE-2022-25769

CRITICAL

ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the r...

Affects 2 products across 2 vendors.

CVSS 3.19.1
EPSS0.5%
Percentile42th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, no availability impact.
CWE Weakness Definitions
CWE-1284: CWE-1284
◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in the default .htaccess file allows unauthorized execution of PHP files due to incorrect regex logic in the FilesMatch directive, which only checks the filename and not the full path.

BSID: BS-2024-GLOBAL-315103-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2022-25769?
A vulnerability in the default .htaccess file allows unauthorized execution of PHP files due to incorrect regex logic in the FilesMatch directive, which only checks the filename and not the full path.
What is the CVSS score for CVE-2022-25769?
CVE-2022-25769 has CVSS 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS: 0.5%.
Is CVE-2022-25769 actively exploited?
No confirmed active exploitation of CVE-2022-25769 as of 2026-09-25.
How do I remediate CVE-2022-25769?
Priority: HIGH. Advisory: https://www.mautic.org/blog/community/mautic-4-2-one-small-step-mautic PSIRT: [email protected]
What systems are affected by CVE-2022-25769?
CVE-2022-25769 affects Acquia Mautic; Mautic Mautic.
Vulnerability Details
CVE IDCVE-2022-25769
BSIDBS-2024-GLOBAL-315103-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Published2024-09-18
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
CWE-1284
SourceNVD
Official Description

ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by uploading a PHP file with a permitted filename to a directory other than the root, bypassing the intended restrictions and gaining unauthorized access or execution capabilities.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Acquia Mautic < 3.3.5 ≥ 4.0.0, < 4.2.0
Mautic Mautic < 4.2.0
Remediation
View Vendor Advisory →

Remediation Priority: HIGH

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 757 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash601317536aa1ee61eb6f4bf8fe86b3dc641a5ea479f653bf4eee21c0274aa95f0ac2ed68ecfd64511c34179fef05d792144a8e8abee00cc99193c96bbfcfcc02
Related CVEs affecting Acquia
CVE-2024-47051 9.9 This advisory addresses two critical security vulnerabilities present in Maut... CVE-2020-35125 9.6 A cross-site scripting (XSS) vulnerability in the forms component of Mautic b... CVE-2020-35124 9.6 A cross-site scripting (XSS) vulnerability in the assets component of Mautic ... CVE-2020-35128 9.0 Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to... CVE-2021-27915 9.0 Prior to the patched version, there is an XSS vulnerability in the descriptio...
View all Acquia CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.1 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →