EUVD-2019-0776

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Contao 4.0 to 4.8.5 has insecure permissions allowing backend users to access restricted content.

Reporter	Title	Published	Views	Family All 12
CNVD	Contao Information Disclosure Vulnerability	18 Dec 201900:00	–	cnvd
Contao	Information disclosure in the back end	17 Dec 201900:00	–	contao
CVE	CVE-2019-19712	17 Dec 201913:59	–	cve
Cvelist	CVE-2019-19712	17 Dec 201913:59	–	cvelist
Friends Of PHP	Information disclosure in the back end	1 Jan 197000:00	–	friendsofphp
Friends Of PHP	Information disclosure in the back end	1 Jan 197000:00	–	friendsofphp
Github Security Blog	Information disclosure in the Contao backend	17 Dec 201922:53	–	github
NVD	CVE-2019-19712	17 Dec 201914:15	–	nvd
OSV	GHSA-4MVC-QC5W-V5QR Information disclosure in the Contao backend	17 Dec 201922:53	–	osv
Prion	Design/Logic Flaw	17 Dec 201914:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "cb620567-8116-324a-921c-b28262fd35cb",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "baf96987-3b01-39a6-80cb-658e2655c442",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/contao/contao/security/advisories/GHSA-4mvc-qc5w-v5qr
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-19712
contao	www.contao.org/en/news.html
contao	www.contao.org/en/security-advisories/information-disclosure-in-the-back-end.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-19712.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-19712.yaml
github	www.github.com/contao/contao
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.3

CVSS 25

EPSS0.00133