CVE-2019-19712

Published: Dec 17, 2019Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them.

Affected (9)

Products: Contao: Contao

Contao

1 product

Contao

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Contao Contao	From 4.4.0 to 4.4.45
Contao Contao	From 4.8 to 4.8.5
Contao Contao	Version 4.0
Contao Contao	Version 4.1
Contao Contao	Version 4.2
Contao Contao	Version 4.3
Contao Contao	Version 4.5
Contao Contao	Version 4.6
Contao Contao	Version 4.7