CVE-2023-29200

Packagist/contao/contao CVE-2023-29200: high 8.8, EPSS 0.80%

Path traversal vulnerability in the file manager

Action: Upgrade contao/contao to 4.9.40 or later.

composer require contao/contao:4.9.40

composer require contao/contao:4.13.21

composer require contao/contao:5.1.4

Affected

Fixed versions

Sources

• osv: GHSA-fp7q-xhhw-6rj3
• https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
• https://nvd.nist.gov/vuln/detail/CVE-2023-29200
• https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
• https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
• https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager.html
• https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2023-29200.yaml
• https://github.com/contao/contao

CVE-2023-29200 · published 2023-04-26T16:05:02Z · modified 2024-02-16T08:10:37.397880Z · JSON