Contao Information Disclosure via Access Control Flaws

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-20028 · ADVISORY
• contao/contao commit bbe5fe1 · WEB
• contao.org/en/news/security-vulnerability-cve-2018-20028.html · WEB
• contao.org/en/news.html · Vendor Advisory

contao/contao のその他の脆弱性

• CVE-2026-55825低 3.1Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can request an attachmen…
• CVE-2026-57232低 3.1Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end module passes configure…
• CVE-2026-55824低 2.6Contao is an Open Source CMS. In versions 4.13.40 through 5.3.46 and 5.7.0-RC1 through 5.7.6, the crawler leaks auth credentials to external…
• CVE-2025-57759中 4.3Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be…
• CVE-2025-57758中 4.3Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, the table access voter in the back end doesn't …