Packagist/contao/core: high

contao/core PHP object injection vulnerability allows for arbitrary code execution

Action: Upgrade contao/core to 2.11.14 or later.

composer require contao/core:2.11.14

composer require contao/core:3.2.5

Affected

Fixed versions

Sources

• osv: GHSA-wq43-8r5p-w3mc
• https://github.com/contao/core/issues/6695
• https://github.com/contao/core/commit/d67c46c1f1283134e3050244cfdda0ef26fa5cd4
• https://github.com/contao/core/commit/f939b5be8a0048ef779def3289e2072febef1b37
• https://contao.org/en/news/major-security-hole-found-in-contao.html
• https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/2014-02-13.yaml

published 2024-05-15T18:31:04Z · modified 2024-11-29T05:39:58.333024Z · JSON