Medium WID-SEC-2026-4445 1 CVE

Contao: Schwachstelle ermöglicht Offenlegung von Informationen

Published Nov 9, 2026 · Updated Nov 9, 2026 · de

Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Contao ausnutzen, um Informationen offenzulegen.

Product

Contao ist ein Open Source Content Management System zur Erstellung von Websites und Webanwendungen.

Vulnerabilities 1

High 8.4

CVE-2024-28235

Contao possible cookie sharing with external domains while checking protected pages for broken links

Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protected pages, Contao sends the cookie header to external urls as well, the passed options for the http …

contao contao contao/core-bundle Packagist

Apr 9, 2024

Revision history

2026-11-09 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-9jh5-qf84-x6pr vom 2026-11-09
https://github.com/contao/contao/security/advisories/GHSA-9jh5-qf84-x6pr