GHSA-5974-GFQC-WRCM Contao: Improper access control in the table access voter

Due to a caching defect in the security voter that governs table-level access to Contao's Data Container DCA backend, a low-privileged, non-admin backend user can obtain unauthorized read, create, update, and delete access to database tables outside their assigned module permissions. This include...

PT-2026-109308

Name of the Vulnerable Software and Affected Versions Contao versions 5.7.0 through 5.7.11 Description A caching defect in the security voter governing table-level access to the Data Container DCA backend allows a low-privileged, non-admin backend user to obtain unauthorized read, create, update,...