Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Improper Access Control

🗓️ 25 Sep 2025 06:29:57Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 5 Views

Contao has improper access control in the backend table voter, enabling unauthorized access to restricted modules.

Related
Detection
Refs
Vulners
Node
OR
contaocontao/contaoRange5.4.0-RC1–5.6.0php
contaocontao/contaoRange5.0.0-RC1–5.3.37php
contaocontao/contaoMatch5.0.0php
contaocontao/contaoMatch5.0.1php
contaocontao/contaoMatch5.0.10php
contaocontao/contaoMatch5.0.2php
contaocontao/contaoMatch5.0.3php
contaocontao/contaoMatch5.0.4php
contaocontao/contaoMatch5.0.5php
contaocontao/contaoMatch5.0.6php
contaocontao/contaoMatch5.0.7php
contaocontao/contaoMatch5.0.8php
contaocontao/contaoMatch5.0.9php
contaocontao/contaoMatch5.1.0php
contaocontao/contaoMatch5.1.0-rc1php
contaocontao/contaoMatch5.1.0-rc2php
contaocontao/contaoMatch5.1.0-rc3php
contaocontao/contaoMatch5.1.1php
contaocontao/contaoMatch5.1.10php
contaocontao/contaoMatch5.1.11php
contaocontao/contaoMatch5.1.2php
contaocontao/contaoMatch5.1.3php
contaocontao/contaoMatch5.1.4php
contaocontao/contaoMatch5.1.5php
contaocontao/contaoMatch5.1.6php
contaocontao/contaoMatch5.1.7php
contaocontao/contaoMatch5.1.8php
contaocontao/contaoMatch5.1.9php
contaocontao/contaoMatch5.2.0php
contaocontao/contaoMatch5.2.0-rc1php
contaocontao/contaoMatch5.2.0-rc2php
contaocontao/contaoMatch5.2.0-rc3php
contaocontao/contaoMatch5.2.0-rc4php
contaocontao/contaoMatch5.2.0-rc5php
contaocontao/contaoMatch5.2.0-rc6php
contaocontao/contaoMatch5.2.1php
contaocontao/contaoMatch5.2.10php
contaocontao/contaoMatch5.2.2php
contaocontao/contaoMatch5.2.3php
contaocontao/contaoMatch5.2.4php
contaocontao/contaoMatch5.2.5php
contaocontao/contaoMatch5.2.6php
contaocontao/contaoMatch5.2.7php
contaocontao/contaoMatch5.2.8php
contaocontao/contaoMatch5.2.9php
contaocontao/contaoMatch5.3.0php
contaocontao/contaoMatch5.3.0-rc1php
contaocontao/contaoMatch5.3.0-rc2php
contaocontao/contaoMatch5.3.0-rc3php
contaocontao/contaoMatch5.3.0-rc4php
contaocontao/contaoMatch5.3.1php
contaocontao/contaoMatch5.3.10php
contaocontao/contaoMatch5.3.11php
contaocontao/contaoMatch5.3.12php
contaocontao/contaoMatch5.3.13php
contaocontao/contaoMatch5.3.14php
contaocontao/contaoMatch5.3.15php
contaocontao/contaoMatch5.3.16php
contaocontao/contaoMatch5.3.17php
contaocontao/contaoMatch5.3.18php
contaocontao/contaoMatch5.3.19php
contaocontao/contaoMatch5.3.2php
contaocontao/contaoMatch5.3.20php
contaocontao/contaoMatch5.3.21php
contaocontao/contaoMatch5.3.22php
contaocontao/contaoMatch5.3.23php
contaocontao/contaoMatch5.3.24php
contaocontao/contaoMatch5.3.25php
contaocontao/contaoMatch5.3.26php
contaocontao/contaoMatch5.3.27php
contaocontao/contaoMatch5.3.28php
contaocontao/contaoMatch5.3.29php
contaocontao/contaoMatch5.3.3php
contaocontao/contaoMatch5.3.30php
contaocontao/contaoMatch5.3.31php
contaocontao/contaoMatch5.3.32php
contaocontao/contaoMatch5.3.33php
contaocontao/contaoMatch5.3.34php
contaocontao/contaoMatch5.3.35php
contaocontao/contaoMatch5.3.36php
contaocontao/contaoMatch5.3.4php
contaocontao/contaoMatch5.3.5php
contaocontao/contaoMatch5.3.6php
contaocontao/contaoMatch5.3.7php
contaocontao/contaoMatch5.3.8php
contaocontao/contaoMatch5.3.9php
contaocontao/contaoMatch5.4.0php
contaocontao/contaoMatch5.4.0-rc1php
contaocontao/contaoMatch5.4.0-rc2php
contaocontao/contaoMatch5.4.0-rc3php
contaocontao/contaoMatch5.4.0-rc4php
contaocontao/contaoMatch5.4.1php
contaocontao/contaoMatch5.4.10php
contaocontao/contaoMatch5.4.11php
contaocontao/contaoMatch5.4.12php
contaocontao/contaoMatch5.4.13php
contaocontao/contaoMatch5.4.14php
contaocontao/contaoMatch5.4.2php
contaocontao/contaoMatch5.4.3php
contaocontao/contaoMatch5.4.4php
contaocontao/contaoMatch5.4.5php
contaocontao/contaoMatch5.4.6php
contaocontao/contaoMatch5.4.7php
contaocontao/contaoMatch5.4.8php
contaocontao/contaoMatch5.4.9php
contaocontao/contaoMatch5.5.0php
contaocontao/contaoMatch5.5.0-rc1php
contaocontao/contaoMatch5.5.0-rc2php
contaocontao/contaoMatch5.5.0-rc3php
contaocontao/contaoMatch5.5.0-rc4php
contaocontao/contaoMatch5.5.1php
contaocontao/contaoMatch5.5.10php
contaocontao/contaoMatch5.5.11php
contaocontao/contaoMatch5.5.12php
contaocontao/contaoMatch5.5.13php
contaocontao/contaoMatch5.5.14php
contaocontao/contaoMatch5.5.15php
contaocontao/contaoMatch5.5.16php
contaocontao/contaoMatch5.5.2php
contaocontao/contaoMatch5.5.3php
contaocontao/contaoMatch5.5.4php
contaocontao/contaoMatch5.5.5php
contaocontao/contaoMatch5.5.6php
contaocontao/contaoMatch5.5.7php
contaocontao/contaoMatch5.5.8php
contaocontao/contaoMatch5.5.9php
contaocontao/contaoMatch5.6.0-rc1php
contaocontao/contaoMatch5.6.0-rc2php
contaocontao/contaoMatch5.6.0-rc3php
contaocontao/contaoRange5.0.0–5.3.37php
core-bundlecontao/core-bundleRange5.4.0-RC1–5.6.0php
core-bundlecontao/core-bundleRange5.0.0-RC1–5.3.37php
core-bundlecontao/core-bundleMatch5.0.0php
core-bundlecontao/core-bundleMatch5.0.1php
core-bundlecontao/core-bundleMatch5.0.10php
core-bundlecontao/core-bundleMatch5.0.2php
core-bundlecontao/core-bundleMatch5.0.3php
core-bundlecontao/core-bundleMatch5.0.4php
core-bundlecontao/core-bundleMatch5.0.5php
core-bundlecontao/core-bundleMatch5.0.6php
core-bundlecontao/core-bundleMatch5.0.7php
core-bundlecontao/core-bundleMatch5.0.8php
core-bundlecontao/core-bundleMatch5.0.9php
core-bundlecontao/core-bundleMatch5.1.0php
core-bundlecontao/core-bundleMatch5.1.0-rc1php
core-bundlecontao/core-bundleMatch5.1.0-rc2php
core-bundlecontao/core-bundleMatch5.1.0-rc3php
core-bundlecontao/core-bundleMatch5.1.1php
core-bundlecontao/core-bundleMatch5.1.10php
core-bundlecontao/core-bundleMatch5.1.11php
core-bundlecontao/core-bundleMatch5.1.2php
core-bundlecontao/core-bundleMatch5.1.3php
core-bundlecontao/core-bundleMatch5.1.4php
core-bundlecontao/core-bundleMatch5.1.5php
core-bundlecontao/core-bundleMatch5.1.6php
core-bundlecontao/core-bundleMatch5.1.7php
core-bundlecontao/core-bundleMatch5.1.8php
core-bundlecontao/core-bundleMatch5.1.9php
core-bundlecontao/core-bundleMatch5.2.0php
core-bundlecontao/core-bundleMatch5.2.0-rc1php
core-bundlecontao/core-bundleMatch5.2.0-rc2php
core-bundlecontao/core-bundleMatch5.2.0-rc3php
core-bundlecontao/core-bundleMatch5.2.0-rc4php
core-bundlecontao/core-bundleMatch5.2.0-rc5php
core-bundlecontao/core-bundleMatch5.2.0-rc6php
core-bundlecontao/core-bundleMatch5.2.1php
core-bundlecontao/core-bundleMatch5.2.10php
core-bundlecontao/core-bundleMatch5.2.2php
core-bundlecontao/core-bundleMatch5.2.3php
core-bundlecontao/core-bundleMatch5.2.4php
core-bundlecontao/core-bundleMatch5.2.5php
core-bundlecontao/core-bundleMatch5.2.6php
core-bundlecontao/core-bundleMatch5.2.7php
core-bundlecontao/core-bundleMatch5.2.8php
core-bundlecontao/core-bundleMatch5.2.9php
core-bundlecontao/core-bundleMatch5.3.0php
core-bundlecontao/core-bundleMatch5.3.0-rc1php
core-bundlecontao/core-bundleMatch5.3.0-rc2php
core-bundlecontao/core-bundleMatch5.3.0-rc3php
core-bundlecontao/core-bundleMatch5.3.0-rc4php
core-bundlecontao/core-bundleMatch5.3.1php
core-bundlecontao/core-bundleMatch5.3.10php
core-bundlecontao/core-bundleMatch5.3.11php
core-bundlecontao/core-bundleMatch5.3.12php
core-bundlecontao/core-bundleMatch5.3.13php
core-bundlecontao/core-bundleMatch5.3.14php
core-bundlecontao/core-bundleMatch5.3.15php
core-bundlecontao/core-bundleMatch5.3.16php
core-bundlecontao/core-bundleMatch5.3.17php
core-bundlecontao/core-bundleMatch5.3.18php
core-bundlecontao/core-bundleMatch5.3.19php
core-bundlecontao/core-bundleMatch5.3.2php
core-bundlecontao/core-bundleMatch5.3.20php
core-bundlecontao/core-bundleMatch5.3.21php
core-bundlecontao/core-bundleMatch5.3.22php
core-bundlecontao/core-bundleMatch5.3.23php
core-bundlecontao/core-bundleMatch5.3.24php
core-bundlecontao/core-bundleMatch5.3.25php
core-bundlecontao/core-bundleMatch5.3.26php
core-bundlecontao/core-bundleMatch5.3.27php
core-bundlecontao/core-bundleMatch5.3.28php
core-bundlecontao/core-bundleMatch5.3.29php
core-bundlecontao/core-bundleMatch5.3.3php
core-bundlecontao/core-bundleMatch5.3.30php
core-bundlecontao/core-bundleMatch5.3.31php
core-bundlecontao/core-bundleMatch5.3.32php
core-bundlecontao/core-bundleMatch5.3.33php
core-bundlecontao/core-bundleMatch5.3.34php
core-bundlecontao/core-bundleMatch5.3.35php
core-bundlecontao/core-bundleMatch5.3.36php
core-bundlecontao/core-bundleMatch5.3.4php
core-bundlecontao/core-bundleMatch5.3.5php
core-bundlecontao/core-bundleMatch5.3.6php
core-bundlecontao/core-bundleMatch5.3.7php
core-bundlecontao/core-bundleMatch5.3.8php
core-bundlecontao/core-bundleMatch5.3.9php
core-bundlecontao/core-bundleMatch5.4.0php
core-bundlecontao/core-bundleMatch5.4.0-rc1php
core-bundlecontao/core-bundleMatch5.4.0-rc2php
core-bundlecontao/core-bundleMatch5.4.0-rc3php
core-bundlecontao/core-bundleMatch5.4.0-rc4php
core-bundlecontao/core-bundleMatch5.4.1php
core-bundlecontao/core-bundleMatch5.4.10php
core-bundlecontao/core-bundleMatch5.4.11php
core-bundlecontao/core-bundleMatch5.4.12php
core-bundlecontao/core-bundleMatch5.4.13php
core-bundlecontao/core-bundleMatch5.4.14php
core-bundlecontao/core-bundleMatch5.4.2php
core-bundlecontao/core-bundleMatch5.4.3php
core-bundlecontao/core-bundleMatch5.4.4php
core-bundlecontao/core-bundleMatch5.4.5php
core-bundlecontao/core-bundleMatch5.4.6php
core-bundlecontao/core-bundleMatch5.4.7php
core-bundlecontao/core-bundleMatch5.4.8php
core-bundlecontao/core-bundleMatch5.4.9php
core-bundlecontao/core-bundleMatch5.5.0php
core-bundlecontao/core-bundleMatch5.5.0-rc1php
core-bundlecontao/core-bundleMatch5.5.0-rc2php
core-bundlecontao/core-bundleMatch5.5.0-rc3php
core-bundlecontao/core-bundleMatch5.5.0-rc4php
core-bundlecontao/core-bundleMatch5.5.1php
core-bundlecontao/core-bundleMatch5.5.10php
core-bundlecontao/core-bundleMatch5.5.11php
core-bundlecontao/core-bundleMatch5.5.12php
core-bundlecontao/core-bundleMatch5.5.13php
core-bundlecontao/core-bundleMatch5.5.14php
core-bundlecontao/core-bundleMatch5.5.15php
core-bundlecontao/core-bundleMatch5.5.16php
core-bundlecontao/core-bundleMatch5.5.2php
core-bundlecontao/core-bundleMatch5.5.3php
core-bundlecontao/core-bundleMatch5.5.4php
core-bundlecontao/core-bundleMatch5.5.5php
core-bundlecontao/core-bundleMatch5.5.6php
core-bundlecontao/core-bundleMatch5.5.7php
core-bundlecontao/core-bundleMatch5.5.8php
core-bundlecontao/core-bundleMatch5.5.9php
core-bundlecontao/core-bundleMatch5.6.0-rc1php
core-bundlecontao/core-bundleMatch5.6.0-rc2php
core-bundlecontao/core-bundleMatch5.6.0-rc3php
core-bundlecontao/core-bundleRange5.0.0–5.3.37php

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
11 Jul 2026 13:49Current
7.1High risk
Vulners AI Score7.1
CVSS 3.14.3
EPSS0.00225
SSVC
contaoimproper access controlbackend table voterunauthorized accessrestricted modules
5