Security Advisory

CVE-2024-47069

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-23 15:30:02

Last updated 2024-09-23 16:09:53

Assigner GitHub_M

State PUBLISHED

Description

Oveleon Cookie Bar is a cookie bar is for the Contao Open Source CMS and allows a visitor to define cookie & privacy settings for the website. Prior to versions 1.16.3 and 2.1.3, the `block/locale` endpoint does not properly sanitize the user-controlled `locale` input before including it in the backends HTTP response, thereby causing reflected cross-site scripting. Versions 1.16.3 and 2.1.3 contain a patch for the vulnerability.

← Browse all CVEs View on cve.org ↗