Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2024/09/17 7:56 p.m.•49 views

CVE-2024-45604 Directory traversal in the file selector widget in contao/core-bundle

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability...

4.3CVSS0.00427EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/17 7:56 p.m.•30 views

CVE-2024-45604 Directory traversal in the file selector widget in contao/core-bundle

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability...

4.3CVSS4.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/09/17 7:56 p.m.•16 views

CVE-2024-45604 Directory traversal in the file selector widget in contao/core-bundle

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability...

4.3CVSS6.7AI score0.00427EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•3 views

CVE-2024-45604: Improper Limitation of a Pathname to a Restricted Directory

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability...

4.3CVSS5.4AI score0.00427EPSS
SaveExploits0References1
Rows per page
Query Builder