tocsin

CVE-2019-19745

2 advisories.

Packagist/contao/core-bundle CVE-2019-19745: high 8.8

Unrestricted file uploads in Contao

Action: Upgrade contao/core-bundle to 4.4.46 or later.

composer require contao/core-bundle:4.4.46
composer require contao/core-bundle:4.8.6

Affected

introducedfixedlast affected
4.0.04.4.46-
4.5.04.8.6-

Fixed versions

4.4.464.8.6

Sources

CVE-2019-19745 · published · modified · JSON

Packagist/contao/contao CVE-2019-19745: high 8.8

Unrestricted file uploads in Contao

Action: Upgrade contao/contao to 4.4.46 or later.

composer require contao/contao:4.4.46
composer require contao/contao:4.8.6

Affected

introducedfixedlast affected
4.0.04.4.46-
4.5.04.8.6-

Fixed versions

4.4.464.8.6

Sources

CVE-2019-19745 · published · modified · JSON