VulnerabilityAnalyzed
CVE-2023-29200
Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request.
MEDIUM 6.5EPSS 0.80%
Does this matter?
Lower severity and a low EPSS score (0.80%). Track it; it rarely justifies an emergency change on its own.
Description
Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao 4.9.40, 4.13.21 or 5.1.4 to receive a patch. There are no known workarounds.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.80% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- contao/contao
- Source
- security-advisories@github.com
References
- https://contao.org/en/security-advisories/directory-traversal-in-the-file-managerVendor Advisory
- https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31dfPatch
- https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3Vendor Advisory
- https://contao.org/en/security-advisories/directory-traversal-in-the-file-managerVendor Advisory
- https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31dfPatch
- https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.