Publish Advisories

GHSA-4mvc-qc5w-v5qr GHSA-wjx8-cgrm-hh8p GHSA-f7wm-x4gw-6m23 GHSA-hr3h-x6gq-rqcp GHSA-r6mv-ppjc-4hgr
2026-05-22 18:04:22 -07:00 · 2024-04-22 18:43:57 +00:00
parent 40cbb2f40d
commit e3ff60e1d4
5 changed files with 7 additions and 7 deletions
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4mvc-qc5w-v5qr",
-  "modified": "2024-01-24T12:49:40Z",
+  "modified": "2024-04-22T18:41:24Z",
  "published": "2019-12-17T22:53:34Z",
  "aliases": [
    "CVE-2019-19712"
  ],
  "summary": "Information disclosure in the Contao backend",
-  "details": "### Impact\n\nBackend users can manipulate the details view URL to show pages and articles that have not been enabled for them.\n\n### Patches\n\nUpdate to Contao 4.4.46 or 4.8.6.\n\n### Workarounds\n\nNone.\n\n### References\n\nhttps://contao.org/en/security-advisories/information-disclosure-in-the-back-end\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n",
+  "details": "### Impact\n\nBack end users can manipulate the details view URL to show pages and articles that have not been enabled for them.\n\n### Patches\n\nUpdate to Contao 4.4.46 or 4.8.6.\n\n### Workarounds\n\nNone.\n\n### References\n\nhttps://contao.org/en/security-advisories/information-disclosure-in-the-back-end\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-wjx8-cgrm-hh8p",
-  "modified": "2024-02-05T10:52:24Z",
+  "modified": "2024-04-22T18:41:39Z",
  "published": "2019-12-17T22:53:10Z",
  "aliases": [
    "CVE-2019-19745"
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f7wm-x4gw-6m23",
-  "modified": "2023-09-20T19:10:45Z",
+  "modified": "2024-04-22T18:42:18Z",
  "published": "2020-09-24T16:23:54Z",
  "aliases": [
    "CVE-2020-25768"
  ],
  "summary": "Contao Insert tag injection in forms",
-  "details": "### Impact\n\nIt is possible to inject insert tags in frontend forms which will be replaced when the page is rendered.\n\n### Patches\n\nUpdate to Contao 4.4.52, 4.9.6 or 4.10.1.\n\n### Workarounds\n\nDisable the front end login form and do not use form fields with array keys such as `fieldname[]`.\n\n### References\n\nhttps://contao.org/en/security-advisories/insert-tag-injection-in-forms\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n",
+  "details": "### Impact\n\nIt is possible to inject insert tags in front end forms which will be replaced when the page is rendered.\n\n### Patches\n\nUpdate to Contao 4.4.52, 4.9.6 or 4.10.1.\n\n### Workarounds\n\nDisable the front end login form and do not use form fields with array keys such as `fieldname[]`.\n\n### References\n\nhttps://contao.org/en/security-advisories/insert-tag-injection-in-forms\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-hr3h-x6gq-rqcp",
-  "modified": "2023-04-25T16:32:31Z",
+  "modified": "2024-04-22T18:41:57Z",
  "published": "2021-08-25T14:45:01Z",
  "aliases": [
    "CVE-2021-35955"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-r6mv-ppjc-4hgr",
-  "modified": "2023-04-25T16:37:22Z",
+  "modified": "2024-04-22T18:42:22Z",
  "published": "2021-08-23T19:41:04Z",
  "aliases": [
    "CVE-2021-37626"