CVE-2024-45604

Published: 2024-09-17T20:15Z

Last Modified: 2024-09-25T19:22Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt