Description
Contao 4.7 allows CSRF.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | contao/contao | >= 4.7.0, < 4.7.3 | 4.7.3 | GHSA-hwmh-9jj9-8c9c |
| Packagist | contao/core-bundle | >= 4.7.0, < 4.7.3 | 4.7.3 | GHSA-hwmh-9jj9-8c9c |
High · 8.8
CVE-2019-10642
EUVD-2022-4230GHSA-hwmh-9jj9-8c9c
Contao CSRF Token Bypass
Published Apr 17, 2019 · Updated Aug 4, 2024 · Assigned by mitre