PT-2019-8137
CVE-2017-16558
·
Published
2019-04-25
·
Updated
2022-05-24
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Contao versions 3.0.0 through 3.5.30
Contao versions 4.0.0 through 4.4.7
Description
The issue is an SQL injection vulnerability that affects both the back end and the listing module.
Recommendations
For Contao versions 3.0.0 through 3.5.30, update to a version that contains a fix for this issue.
For Contao versions 4.0.0 through 4.4.7, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to the listing module and the back end to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾