PT-2019-8137
CVE-2017-16558
·
تاريخ النشر
2019-04-25
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Contao versions 3.0.0 through 3.5.30
Contao versions 4.0.0 through 4.4.7
Description
The issue is an SQL injection vulnerability that affects both the back end and the listing module.
Recommendations
For Contao versions 3.0.0 through 3.5.30, update to a version that contains a fix for this issue.
For Contao versions 4.0.0 through 4.4.7, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to the listing module and the back end to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾