~ / search / GHSA-q99w-j4mj-7hj8

GHSA-q99w-j4mj-7hj8

Contao Information Disclosure via Access Control Flaws

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-20028

Packages

EcosystemPackageAffectedFixed in
Packagist contao/contao >= 3.0.0, < 3.5.37 3.5.37
Packagist contao/contao >= 4.6.0, < 4.6.11 4.6.11
Packagist contao/contao >= 4.4.0, < 4.4.31 4.4.31

Details

As written in the advisory (Markdown source, shown as plain text).

Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control.

References

External links from the advisory. They lead to third-party sites.