tocsin

CVE-2025-57758

2 advisories.

Packagist/contao/core-bundle CVE-2025-57758: medium 4.3

Contao applies improper access control in the back end voters

Action: Upgrade contao/core-bundle to 5.3.38 or later.

composer require contao/core-bundle:5.3.38
composer require contao/core-bundle:5.6.1

Affected

introducedfixedlast affected
5.0.05.3.38-
5.4.0-RC15.6.1-

Fixed versions

5.3.385.6.1

Sources

CVE-2025-57758 · published · modified · JSON

Packagist/contao/contao CVE-2025-57758: medium 4.3

Contao applies improper access control in the back end voters

Action: Upgrade contao/contao to 5.3.38 or later.

composer require contao/contao:5.3.38
composer require contao/contao:5.6.1

Affected

introducedfixedlast affected
5.0.05.3.38-
5.4.0-RC15.6.1-

Fixed versions

5.3.385.6.1

Sources

CVE-2025-57758 · published · modified · JSON