Packagist/contao/core: critical 9
contao/core Insufficient input validation allows for code injection and remote execution
Action: Upgrade contao/core to 2.11.17 or later.
composer require contao/core:2.11.17composer require contao/core:3.2.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.11.17 | - |
| 3.0.0 | 3.2.9 | - |
Fixed versions
| 2.11.17 | 3.2.9 |
Sources
- osv: GHSA-wxxw-5gq6-j2g5
- https://github.com/contao/core/issues/6855
- https://github.com/contao/core/commit/d45503568751a868193929ef349a49ae5e6686f0
- https://github.com/contao/core/commit/d4a14f167e0cbb2e77c7829299e5b36f55c1ebce
- https://c-c-a.org/aktuelles/news/details/eine-neue-kritische-sicherheitsluecke-in-contao-entdeckt
- https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/2014-04-07.yaml
- https://web.archive.org/web/20240214121817/https://contao.org/en/news/new-security-hole-found-in-contao
published · modified · JSON