PT-2019-8137
CVE-2017-16558
·
Publicado
2019-04-25
·
Atualizado
2022-05-24
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Contao versions 3.0.0 through 3.5.30
Contao versions 4.0.0 through 4.4.7
Description
The issue is an SQL injection vulnerability that affects both the back end and the listing module.
Recommendations
For Contao versions 3.0.0 through 3.5.30, update to a version that contains a fix for this issue.
For Contao versions 4.0.0 through 4.4.7, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to the listing module and the back end to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾