Contao Core directory traversal vulnerability
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated backend users to view files outside their file mounts or the document root via unspecified vectors.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-0269US | medium4.3 | — | ||
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the docume… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://contao.org/en/news/contao-3_2_19.htmlWEB
- https://contao.org/en/news/contao-3_4_4.htmlWEB
- https://contao.org/en/news/directory-traversal-vulnerability-cve-2015-0269.htmlWEB
- https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2015-0269.yamlWEB
- https://github.com/contao/corePACKAGE
- https://github.com/contao/core/commit/0229e839b4849e402256b972eb62f89f2c29674dWEB
- https://nvd.nist.gov/vuln/detail/CVE-2015-0269ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan