GHSA-J99G-QJVX-995G Contao Does Not Expire Tokens Correctly

Security researcher Ali Razzaq has discovered that confirming an opt-in token does not invalidate previous opt-in tokens in Contao 4.7...

PT-2019-11959

Name of the Vulnerable Software and Affected Versions Contao version 4.7 Description The issue allows the use of a key past its expiration date. A security researcher discovered that confirming an opt-in token does not invalidate previous opt-in tokens. Recommendations For Contao version 4.7,...

Invalidating opt-in tokens

Date : 2019-04-09 CVEID : CVE-2019-10643 Description Security researcher Ali Razzaq has discovered that confirming an opt-in token does not invalidate previous opt-in tokens in Contao 4.7. Affected versions Contao 4.7 up to 4.7.2 Suggested solution Update to Contao 4.7.3...