CVE-2024-28234
1 advisory.
Packagist/contao/comments-bundle CVE-2024-28234: medium 4.3, EPSS 0.57%
Contao: Insufficient BBCode sanitizer
Action: Upgrade contao/comments-bundle to 4.13.40 or later.
composer require contao/comments-bundle:4.13.40composer require contao/comments-bundle:5.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 4.13.40 | - |
| 5.0.0-RC1 | 5.3.4 | - |
Fixed versions
| 4.13.40 | 5.3.4 |
Sources
- osv: GHSA-j55w-hjpj-825g
- https://github.com/contao/contao/security/advisories/GHSA-j55w-hjpj-825g
- https://nvd.nist.gov/vuln/detail/CVE-2024-28234
- https://github.com/contao/contao/commit/55b995d8d35da0d36bc6a22c53fe6423ab0c4ae2
- https://github.com/contao/contao/commit/6d42e667177c972ae7c219645593c262d7764ce2
- https://contao.org/en/security-advisories/insufficient-bbcode-sanitization
- https://github.com/contao/contao
CVE-2024-28234 · published · modified · JSON