Security Advisories for contao/core-bundle in packagist
Moderate
12 days ago
Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled
packagist
contao/core-bundle
Moderate
12 days ago
Contao: The registration module re-sends activation mails
packagist
contao/core-bundle
Low
12 days ago
Contao: Cross-site request forgery in custom backend actions
packagist
contao/core-bundle
Moderate
12 days ago
Contao: Improper access control in the preview links module
packagist
contao/core-bundle
Moderate
12 days ago
Contao: Improper access control in the table access voter
packagist
contao/core-bundle
Low
27 days ago
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
packagist
contao/core-bundle, contao/contao
Low
3 months ago
Contao: Possible path traversal in job download URIs
packagist
contao/core-bundle, contao/contao
Low
3 months ago
Contao crawler leaks auth credentials to external hosts
packagist
contao/core-bundle, contao/contao
Low
11 months ago
Contao is vulnerable to cross-site scripting in templates
packagist
contao/core-bundle
Moderate
11 months ago
Contao is vulnerable to remote code execution in template closures
packagist
contao/core-bundle
Moderate
about 1 year ago
Contao does not properly manage privileges for page and article fields
packagist
contao/contao, contao/core-bundle
Moderate
about 1 year ago
Contao can disclose sensitive information in the news module
packagist
contao/contao, contao/core-bundle
Moderate
about 1 year ago
Contao discloses sensitive information in the front end search index
packagist
contao/contao, contao/core-bundle
Moderate
about 1 year ago
Contao applies improper access control in the back end voters
packagist
contao/contao, contao/core-bundle
Moderate
over 1 year ago
Contao Vulnerable to Cross-Site Scripting (XSS) through SVG uploads
packagist
contao/core-bundle
Moderate
about 2 years ago
Contao affected by insert tag injection via canonical URL
packagist
contao/core-bundle
Moderate
about 2 years ago
Contao affected by directory traversal in the file selector widget
packagist
contao/core-bundle
High
about 2 years ago
Contao affected by remote command execution through file upload
packagist
contao/core-bundle
Moderate
over 2 years ago
Contao: Cross site scripting in the file manager
packagist
contao/core-bundle
Moderate
over 2 years ago
Contao: Remember-me tokens will not be cleared after a password change
packagist
contao/core-bundle
High
over 2 years ago
Contao: Possible cookie sharing with external domains while checking protected pages for broken links
packagist
contao/core-bundle
Critical
over 4 years ago
Contao SQL injection in the file manager
packagist
contao/core-bundle, contao/contao
Critical
over 4 years ago
Contao SQL injection in the backend and listing module
packagist
contao/listing-bundle, contao/core-bundle, contao/contao
High
over 4 years ago
Cross site scripting via canonical tag in Contao
packagist
contao/contao, contao/core-bundle
Critical
over 4 years ago
Contao Does Not Invalidate Existing Sessions When Password Changes
packagist
contao/core, contao/core-bundle, contao/contao
High
over 4 years ago
Contao Core directory traversal vulnerability
packagist
contao/core, contao/core-bundle, contao/contao
Critical
over 4 years ago
Contao Does Not Expire Tokens Correctly
packagist
contao/core-bundle, contao/contao
Moderate
over 4 years ago
Cross-site Scripting in Contao
packagist
contao/core-bundle, contao/core, contao/contao
Moderate
about 5 years ago
Cross site scripting via HTML attributes in the back end
packagist
contao/core-bundle, contao/contao
High
about 5 years ago
Privilege escalation via form generator
packagist
contao/contao, contao/core-bundle
Moderate
about 5 years ago
PHP file inclusion via insert tags
packagist
contao/contao, contao/core-bundle
Moderate
over 5 years ago
Cross site scripting in the system log
packagist
contao/contao, contao/core-bundle
Moderate
about 6 years ago
Contao Insert tag injection in forms
packagist
contao/core-bundle, contao/contao
Moderate
almost 7 years ago
Insert tag injection in the Contao login module
packagist
contao/contao, contao/core-bundle
Moderate
almost 7 years ago
Information disclosure in the Contao backend
packagist
contao/contao, contao/core-bundle
High
almost 7 years ago
Unrestricted file uploads in Contao
packagist
contao/contao, contao/core-bundle