Contao can disclose sensitive information in the news module

概要

参考情報

• contao/contao security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-57757 · ADVISORY
• contao/contao commit e75f46b · WEB
• contao.org/en/security-advisories/information-disclosure-in-the-news-module · WEB
• contao/contao · PACKAGE

contao/contao のその他の脆弱性

• CVE-2026-55825低 3.1Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can request an attachmen…
• CVE-2026-57232低 3.1Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end module passes configure…
• CVE-2026-55824低 2.6Contao is an Open Source CMS. In versions 4.13.40 through 5.3.46 and 5.7.0-RC1 through 5.7.6, the crawler leaks auth credentials to external…
• CVE-2025-57759中 4.3Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be…
• CVE-2025-57758中 4.3Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, the table access voter in the back end doesn't …