CVE-2024-45612

Packagist/contao/core-bundle CVE-2024-45612: medium 5.3, EPSS 0.30%

Contao affected by insert tag injection via canonical URL

Action: Upgrade contao/core-bundle to 4.13.49 or later.

composer require contao/core-bundle:4.13.49

composer require contao/core-bundle:5.3.15

composer require contao/core-bundle:5.4.3

Affected

Fixed versions

Sources

• osv: GHSA-2xpq-xp6c-5mgj
• https://github.com/contao/contao/security/advisories/GHSA-2xpq-xp6c-5mgj
• https://nvd.nist.gov/vuln/detail/CVE-2024-45612
• https://github.com/contao/contao/commit/1c28e9ac7a7b915134962a59681a8701a44ccbe2
• https://github.com/contao/contao/commit/d105224e14ddc84f27cd8802b553369decdcbe66
• https://github.com/contao/contao/commit/ffe05cda5310dc2bd259d1391197f3849dab8590
• https://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls
• https://github.com/contao/contao

CVE-2024-45612 · published 2024-09-17T14:59:02Z · modified 2024-09-23T21:49:44.127021Z · JSON