Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Improper Access Control

🗓️ 25 Sep 2025 05:59:54Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

Contao exposes protected news via public RSS due to improper access control.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNNVD		Contao 安全漏洞
28 Aug 202500:00
–cnnvd
CVE		CVE-2025-57757
28 Aug 202516:32
–cve
Cvelist		CVE-2025-57757 Contao discloses information in the news module
28 Aug 202516:32
–cvelist
EUVD		EUVD-2025-26126
3 Oct 202520:07
–euvd
Github Security Blog		Contao can disclose sensitive information in the news module
28 Aug 202514:58
–github
NVD		CVE-2025-57757
28 Aug 202517:15
–nvd
OSV		CVE-2025-57757 Contao discloses information in the news module
28 Aug 202516:32
–osv
OSV		GHSA-W53M-GXVG-VX7P Contao can disclose sensitive information in the news module
28 Aug 202514:58
–osv
Positive Technologies		PT-2025-35103
28 Aug 202500:00
–ptsecurity
RedhatCVE		CVE-2025-57757
30 Aug 202518:19
–redhatcve
Rows per page
Vulners
Node
OR
contaocontao/contaoRange5.0.0-RC1–5.3.37php
contaocontao/contaoRange5.4.0-RC1–5.6.0php
contaocontao/contaoMatch5.0.0php
contaocontao/contaoMatch5.0.0-rc1php
contaocontao/contaoMatch5.0.0-rc2php
contaocontao/contaoMatch5.0.0-rc3php
contaocontao/contaoMatch5.0.0-rc4php
contaocontao/contaoMatch5.0.1php
contaocontao/contaoMatch5.0.10php
contaocontao/contaoMatch5.0.2php
contaocontao/contaoMatch5.0.3php
contaocontao/contaoMatch5.0.4php
contaocontao/contaoMatch5.0.5php
contaocontao/contaoMatch5.0.6php
contaocontao/contaoMatch5.0.7php
contaocontao/contaoMatch5.0.8php
contaocontao/contaoMatch5.0.9php
contaocontao/contaoMatch5.1.0php
contaocontao/contaoMatch5.1.0-rc1php
contaocontao/contaoMatch5.1.0-rc2php
contaocontao/contaoMatch5.1.0-rc3php
contaocontao/contaoMatch5.1.1php
contaocontao/contaoMatch5.1.10php
contaocontao/contaoMatch5.1.11php
contaocontao/contaoMatch5.1.2php
contaocontao/contaoMatch5.1.3php
contaocontao/contaoMatch5.1.4php
contaocontao/contaoMatch5.1.5php
contaocontao/contaoMatch5.1.6php
contaocontao/contaoMatch5.1.7php
contaocontao/contaoMatch5.1.8php
contaocontao/contaoMatch5.1.9php
contaocontao/contaoMatch5.2.0php
contaocontao/contaoMatch5.2.0-rc1php
contaocontao/contaoMatch5.2.0-rc2php
contaocontao/contaoMatch5.2.0-rc3php
contaocontao/contaoMatch5.2.0-rc4php
contaocontao/contaoMatch5.2.0-rc5php
contaocontao/contaoMatch5.2.0-rc6php
contaocontao/contaoMatch5.2.1php
contaocontao/contaoMatch5.2.10php
contaocontao/contaoMatch5.2.2php
contaocontao/contaoMatch5.2.3php
contaocontao/contaoMatch5.2.4php
contaocontao/contaoMatch5.2.5php
contaocontao/contaoMatch5.2.6php
contaocontao/contaoMatch5.2.7php
contaocontao/contaoMatch5.2.8php
contaocontao/contaoMatch5.2.9php
contaocontao/contaoMatch5.3.0php
contaocontao/contaoMatch5.3.0-rc1php
contaocontao/contaoMatch5.3.0-rc2php
contaocontao/contaoMatch5.3.0-rc3php
contaocontao/contaoMatch5.3.0-rc4php
contaocontao/contaoMatch5.3.1php
contaocontao/contaoMatch5.3.10php
contaocontao/contaoMatch5.3.11php
contaocontao/contaoMatch5.3.12php
contaocontao/contaoMatch5.3.13php
contaocontao/contaoMatch5.3.14php
contaocontao/contaoMatch5.3.15php
contaocontao/contaoMatch5.3.16php
contaocontao/contaoMatch5.3.17php
contaocontao/contaoMatch5.3.18php
contaocontao/contaoMatch5.3.19php
contaocontao/contaoMatch5.3.2php
contaocontao/contaoMatch5.3.20php
contaocontao/contaoMatch5.3.21php
contaocontao/contaoMatch5.3.22php
contaocontao/contaoMatch5.3.23php
contaocontao/contaoMatch5.3.24php
contaocontao/contaoMatch5.3.25php
contaocontao/contaoMatch5.3.26php
contaocontao/contaoMatch5.3.27php
contaocontao/contaoMatch5.3.28php
contaocontao/contaoMatch5.3.29php
contaocontao/contaoMatch5.3.3php
contaocontao/contaoMatch5.3.30php
contaocontao/contaoMatch5.3.31php
contaocontao/contaoMatch5.3.32php
contaocontao/contaoMatch5.3.33php
contaocontao/contaoMatch5.3.34php
contaocontao/contaoMatch5.3.35php
contaocontao/contaoMatch5.3.36php
contaocontao/contaoMatch5.3.4php
contaocontao/contaoMatch5.3.5php
contaocontao/contaoMatch5.3.6php
contaocontao/contaoMatch5.3.7php
contaocontao/contaoMatch5.3.8php
contaocontao/contaoMatch5.3.9php
contaocontao/contaoMatch5.4.0php
contaocontao/contaoMatch5.4.0-rc1php
contaocontao/contaoMatch5.4.0-rc2php
contaocontao/contaoMatch5.4.0-rc3php
contaocontao/contaoMatch5.4.0-rc4php
contaocontao/contaoMatch5.4.1php
contaocontao/contaoMatch5.4.10php
contaocontao/contaoMatch5.4.11php
contaocontao/contaoMatch5.4.12php
contaocontao/contaoMatch5.4.13php
contaocontao/contaoMatch5.4.14php
contaocontao/contaoMatch5.4.2php
contaocontao/contaoMatch5.4.3php
contaocontao/contaoMatch5.4.4php
contaocontao/contaoMatch5.4.5php
contaocontao/contaoMatch5.4.6php
contaocontao/contaoMatch5.4.7php
contaocontao/contaoMatch5.4.8php
contaocontao/contaoMatch5.4.9php
contaocontao/contaoMatch5.5.0php
contaocontao/contaoMatch5.5.0-rc1php
contaocontao/contaoMatch5.5.0-rc2php
contaocontao/contaoMatch5.5.0-rc3php
contaocontao/contaoMatch5.5.0-rc4php
contaocontao/contaoMatch5.5.1php
contaocontao/contaoMatch5.5.10php
contaocontao/contaoMatch5.5.11php
contaocontao/contaoMatch5.5.12php
contaocontao/contaoMatch5.5.13php
contaocontao/contaoMatch5.5.14php
contaocontao/contaoMatch5.5.15php
contaocontao/contaoMatch5.5.16php
contaocontao/contaoMatch5.5.2php
contaocontao/contaoMatch5.5.3php
contaocontao/contaoMatch5.5.4php
contaocontao/contaoMatch5.5.5php
contaocontao/contaoMatch5.5.6php
contaocontao/contaoMatch5.5.7php
contaocontao/contaoMatch5.5.8php
contaocontao/contaoMatch5.5.9php
contaocontao/contaoMatch5.6.0-rc1php
contaocontao/contaoMatch5.6.0-rc2php
contaocontao/contaoMatch5.6.0-rc3php
core-bundlecontao/core-bundleRange5.4.0-RC1–5.6.0php
core-bundlecontao/core-bundleRange5.0.0-RC1–5.3.37php
core-bundlecontao/core-bundleMatch5.0.0php
core-bundlecontao/core-bundleMatch5.0.0-rc1php
core-bundlecontao/core-bundleMatch5.0.0-rc2php
core-bundlecontao/core-bundleMatch5.0.0-rc3php
core-bundlecontao/core-bundleMatch5.0.0-rc4php
core-bundlecontao/core-bundleMatch5.0.1php
core-bundlecontao/core-bundleMatch5.0.10php
core-bundlecontao/core-bundleMatch5.0.2php
core-bundlecontao/core-bundleMatch5.0.3php
core-bundlecontao/core-bundleMatch5.0.4php
core-bundlecontao/core-bundleMatch5.0.5php
core-bundlecontao/core-bundleMatch5.0.6php
core-bundlecontao/core-bundleMatch5.0.7php
core-bundlecontao/core-bundleMatch5.0.8php
core-bundlecontao/core-bundleMatch5.0.9php
core-bundlecontao/core-bundleMatch5.1.0php
core-bundlecontao/core-bundleMatch5.1.0-rc1php
core-bundlecontao/core-bundleMatch5.1.0-rc2php
core-bundlecontao/core-bundleMatch5.1.0-rc3php
core-bundlecontao/core-bundleMatch5.1.1php
core-bundlecontao/core-bundleMatch5.1.10php
core-bundlecontao/core-bundleMatch5.1.11php
core-bundlecontao/core-bundleMatch5.1.2php
core-bundlecontao/core-bundleMatch5.1.3php
core-bundlecontao/core-bundleMatch5.1.4php
core-bundlecontao/core-bundleMatch5.1.5php
core-bundlecontao/core-bundleMatch5.1.6php
core-bundlecontao/core-bundleMatch5.1.7php
core-bundlecontao/core-bundleMatch5.1.8php
core-bundlecontao/core-bundleMatch5.1.9php
core-bundlecontao/core-bundleMatch5.2.0php
core-bundlecontao/core-bundleMatch5.2.0-rc1php
core-bundlecontao/core-bundleMatch5.2.0-rc2php
core-bundlecontao/core-bundleMatch5.2.0-rc3php
core-bundlecontao/core-bundleMatch5.2.0-rc4php
core-bundlecontao/core-bundleMatch5.2.0-rc5php
core-bundlecontao/core-bundleMatch5.2.0-rc6php
core-bundlecontao/core-bundleMatch5.2.1php
core-bundlecontao/core-bundleMatch5.2.10php
core-bundlecontao/core-bundleMatch5.2.2php
core-bundlecontao/core-bundleMatch5.2.3php
core-bundlecontao/core-bundleMatch5.2.4php
core-bundlecontao/core-bundleMatch5.2.5php
core-bundlecontao/core-bundleMatch5.2.6php
core-bundlecontao/core-bundleMatch5.2.7php
core-bundlecontao/core-bundleMatch5.2.8php
core-bundlecontao/core-bundleMatch5.2.9php
core-bundlecontao/core-bundleMatch5.3.0php
core-bundlecontao/core-bundleMatch5.3.0-rc1php
core-bundlecontao/core-bundleMatch5.3.0-rc2php
core-bundlecontao/core-bundleMatch5.3.0-rc3php
core-bundlecontao/core-bundleMatch5.3.0-rc4php
core-bundlecontao/core-bundleMatch5.3.1php
core-bundlecontao/core-bundleMatch5.3.10php
core-bundlecontao/core-bundleMatch5.3.11php
core-bundlecontao/core-bundleMatch5.3.12php
core-bundlecontao/core-bundleMatch5.3.13php
core-bundlecontao/core-bundleMatch5.3.14php
core-bundlecontao/core-bundleMatch5.3.15php
core-bundlecontao/core-bundleMatch5.3.16php
core-bundlecontao/core-bundleMatch5.3.17php
core-bundlecontao/core-bundleMatch5.3.18php
core-bundlecontao/core-bundleMatch5.3.19php
core-bundlecontao/core-bundleMatch5.3.2php
core-bundlecontao/core-bundleMatch5.3.20php
core-bundlecontao/core-bundleMatch5.3.21php
core-bundlecontao/core-bundleMatch5.3.22php
core-bundlecontao/core-bundleMatch5.3.23php
core-bundlecontao/core-bundleMatch5.3.24php
core-bundlecontao/core-bundleMatch5.3.25php
core-bundlecontao/core-bundleMatch5.3.26php
core-bundlecontao/core-bundleMatch5.3.27php
core-bundlecontao/core-bundleMatch5.3.28php
core-bundlecontao/core-bundleMatch5.3.29php
core-bundlecontao/core-bundleMatch5.3.3php
core-bundlecontao/core-bundleMatch5.3.30php
core-bundlecontao/core-bundleMatch5.3.31php
core-bundlecontao/core-bundleMatch5.3.32php
core-bundlecontao/core-bundleMatch5.3.33php
core-bundlecontao/core-bundleMatch5.3.34php
core-bundlecontao/core-bundleMatch5.3.35php
core-bundlecontao/core-bundleMatch5.3.36php
core-bundlecontao/core-bundleMatch5.3.4php
core-bundlecontao/core-bundleMatch5.3.5php
core-bundlecontao/core-bundleMatch5.3.6php
core-bundlecontao/core-bundleMatch5.3.7php
core-bundlecontao/core-bundleMatch5.3.8php
core-bundlecontao/core-bundleMatch5.3.9php
core-bundlecontao/core-bundleMatch5.4.0php
core-bundlecontao/core-bundleMatch5.4.0-rc1php
core-bundlecontao/core-bundleMatch5.4.0-rc2php
core-bundlecontao/core-bundleMatch5.4.0-rc3php
core-bundlecontao/core-bundleMatch5.4.0-rc4php
core-bundlecontao/core-bundleMatch5.4.1php
core-bundlecontao/core-bundleMatch5.4.10php
core-bundlecontao/core-bundleMatch5.4.11php
core-bundlecontao/core-bundleMatch5.4.12php
core-bundlecontao/core-bundleMatch5.4.13php
core-bundlecontao/core-bundleMatch5.4.14php
core-bundlecontao/core-bundleMatch5.4.2php
core-bundlecontao/core-bundleMatch5.4.3php
core-bundlecontao/core-bundleMatch5.4.4php
core-bundlecontao/core-bundleMatch5.4.5php
core-bundlecontao/core-bundleMatch5.4.6php
core-bundlecontao/core-bundleMatch5.4.7php
core-bundlecontao/core-bundleMatch5.4.8php
core-bundlecontao/core-bundleMatch5.4.9php
core-bundlecontao/core-bundleMatch5.5.0php
core-bundlecontao/core-bundleMatch5.5.0-rc1php
core-bundlecontao/core-bundleMatch5.5.0-rc2php
core-bundlecontao/core-bundleMatch5.5.0-rc3php
core-bundlecontao/core-bundleMatch5.5.0-rc4php
core-bundlecontao/core-bundleMatch5.5.1php
core-bundlecontao/core-bundleMatch5.5.10php
core-bundlecontao/core-bundleMatch5.5.11php
core-bundlecontao/core-bundleMatch5.5.12php
core-bundlecontao/core-bundleMatch5.5.13php
core-bundlecontao/core-bundleMatch5.5.14php
core-bundlecontao/core-bundleMatch5.5.15php
core-bundlecontao/core-bundleMatch5.5.16php
core-bundlecontao/core-bundleMatch5.5.2php
core-bundlecontao/core-bundleMatch5.5.3php
core-bundlecontao/core-bundleMatch5.5.4php
core-bundlecontao/core-bundleMatch5.5.5php
core-bundlecontao/core-bundleMatch5.5.6php
core-bundlecontao/core-bundleMatch5.5.7php
core-bundlecontao/core-bundleMatch5.5.8php
core-bundlecontao/core-bundleMatch5.5.9php
core-bundlecontao/core-bundleMatch5.6.0-rc1php
core-bundlecontao/core-bundleMatch5.6.0-rc2php
core-bundlecontao/core-bundleMatch5.6.0-rc3php

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
11 Jul 2026 13:34Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.15.3
EPSS0.00281
SSVC
Improper Access ControlContaoProtected News ArchivesPublic RSS FeedRestricted News Items
7