CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2019/12/17 10:53 p.m.•89 views

GHSA-4MVC-QC5W-V5QR Information disclosure in the Contao backend

Impact Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them. Patches Update to Contao 4.4.46 or 4.8.6. Workarounds None. References https://contao.org/en/security-advisories/information-disclosure-in-the-back-end For more information If...

5.3CVSS5.1AI score0.0088EPSS

SaveExploits0References7

Cvelist•added 2019/12/17 1:59 p.m.•51 views

CVE-2019-19712

Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them...

5.2AI score0.0088EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/12/17 12:00 a.m.•2 views

CVE-2019-19712: Incorrect Default Permissions

Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them...

5.3CVSS5.9AI score0.0088EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by