Insert tag injection in the Contao login module

概要

参考情報

• contao/contao security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2019-19714 · ADVISORY
• contao.org/en/security-advisories/insert-tag-injection-in-the-login-module.html · WEB
• FriendsOfPHP/security-advisories · WEB
• FriendsOfPHP/security-advisories · WEB
• contao/contao · PACKAGE
• contao.org/en/news.html · Vendor Advisory

contao/contao のその他の脆弱性

• CVE-2026-55825低 3.1Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can request an attachmen…
• CVE-2026-57232低 3.1Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end module passes configure…
• CVE-2026-55824低 2.6Contao is an Open Source CMS. In versions 4.13.40 through 5.3.46 and 5.7.0-RC1 through 5.7.6, the crawler leaks auth credentials to external…
• CVE-2025-57759中 4.3Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be…
• CVE-2025-57758中 4.3Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, the table access voter in the back end doesn't …