DeutschShown in its original language — a full translation is planned for a future version.
Contao: Mehrere Schwachstellen
view advisory published 2025-08-27
Ein Angreifer kann mehrere Schwachstellen in Contao ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-57759US | — | — | ||
Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articl… | ||||
| CVE-2025-57758US | — | — | ||
Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, the table access voter in the back end doesn't check if a user is allowed to access the… | ||||
| CVE-2025-57757US | — | — | ||
Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, if a news feed contains protected news archives, their news items are not filtered and… | ||||
| CVE-2025-57756US | — | — | ||
Contao is an Open Source CMS. In versions starting from 4.9.14 and prior to 4.13.56, 5.3.38, and 5.6.1, protected content elements that are rendered as fragments are indexed and be… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-2xmj-8wmq-7475 vom 2025-08-27external
- GitHub Security Advisory GHSA-7m47-r75r-cx8v vom 2025-08-27external
- GitHub Security Advisory GHSA-qqfq-7cpp-hcqj vom 2025-08-27external
- GitHub Security Advisory GHSA-w53m-gxvg-vx7p vom 2025-08-27external
- WID-SEC-W-2025-1920 - CSAF Versionself
- WID-SEC-2025-1920 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan