| Package | Affected versions | Patched versions |
|---|---|---|
| contao/contao | ≥ 4.9.14, < 4.13.56≥ 5.0.0-RC1, < 5.3.38≥ 5.4.0-RC1, < 5.6.1 | 4.13.565.3.385.6.1 |
| contao/core-bundle | ≥ 4.9.14, < 4.13.56≥ 5.0.0-RC1, < 5.3.38≥ 5.4.0-RC1, < 5.6.1 | 4.13.565.3.385.6.1 |
| contao | ≥ 4.10.0, < 4.13.56≥ 4.9.0, ≤ 4.9.14≥ 5.0.0, < 5.3.38≥ 5.4.0, < 5.6.1 | 4.13.565.3.385.6.1 |
Protected content elements that are rendered as fragments are indexed and become publicly available in the front end search.
Update to Contao 4.13.56, 5.3.38 or 5.6.1.
Disable the front end search.
If you have any questions or comments about this advisory, open an issue in contao/contao.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free