CVE-2018-20028
1 advisory.
Packagist/contao/contao CVE-2018-20028: medium 6.5
Contao Information Disclosure via Access Control Flaws
Action: Upgrade contao/contao to 3.5.37 or later.
composer require contao/contao:3.5.37composer require contao/contao:4.6.11composer require contao/contao:4.4.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.5.37 | - |
| 4.6.0 | 4.6.11 | - |
| 4.4.0 | 4.4.31 | - |
Fixed versions
| 3.5.37 | 4.6.11 | 4.4.31 |
Sources
- osv: GHSA-q99w-j4mj-7hj8
- https://nvd.nist.gov/vuln/detail/CVE-2018-20028
- https://github.com/contao/contao/commit/bbe5fe1d385cd1195670e2d6b972272133443c59
- https://contao.org/en/news/security-vulnerability-cve-2018-20028.html
CVE-2018-20028 · published · modified · JSON