Patryk Gruszka

Segment cloning doesn't have a proper permission check

User name enumeration possible due to response time difference on password reset form

Mautic does not shield .env files from web traffic

Open Redirect vulnerability on user unlock path

Improper Authorization in Reporting API

Users enumeration - weak password login

Improper Access Control in UI upgrade process

XSS in contact/company tracking (no authentication)

XSS in contact tracking and page hits report

Insufficient authentication in upgrade flow