Contao Core directory traversal vulnerability
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated backend users to view files outside their file mounts or the document root via unspecified vectors.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-0269US | medium4.3 | — | ||
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the docume… | ||||
02
references
External citations — patches, advisories, analysis.
- https://contao.org/en/news/contao-3_2_19.htmlWEB
- https://contao.org/en/news/contao-3_4_4.htmlWEB
- https://contao.org/en/news/directory-traversal-vulnerability-cve-2015-0269.htmlWEB
- https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2015-0269.yamlWEB
- https://github.com/contao/corePACKAGE
- https://github.com/contao/core/commit/0229e839b4849e402256b972eb62f89f2c29674dWEB
- https://nvd.nist.gov/vuln/detail/CVE-2015-0269ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan