Skip to content
OpenAdvisories

Vendor

redaxo

27 known vulnerabilities.

Products

core 20 redaxo 4 Redaxo CMS Mediapool 1 Redaxo CMS 1 CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-21857 Public exploit

    Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

    REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions can read arbitrary files within the webroot via path traversal in the Backup addon's file export functionality. The Backup addon does not val…

    redaxo redaxo redaxo/source Packagist