Security Advisory

CVE-2024-45604

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-17 19:56:02
Last updated 2024-09-18 13:09:48
Assigner GitHub_M
State PUBLISHED

Description

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability.