Medium · 6.5 CVE-2018-20028 EUVD-2022-4927GHSA-q99w-j4mj-7hj8

Contao Information Disclosure via Access Control Flaws

Published Apr 17, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control.

Ecosystem	Package	Affected	Fixed	Record
Packagist	contao/contao	>= 3.0.0, < 3.5.37	3.5.37	GHSA-q99w-j4mj-7hj8
Packagist	contao/contao	>= 4.6.0, < 4.6.11	4.6.11	GHSA-q99w-j4mj-7hj8
Packagist	contao/contao	>= 4.4.0, < 4.4.31	4.4.31	GHSA-q99w-j4mj-7hj8