Executive brief
Contao Core directory traversal vulnerability
Affected products
- Packagist contao/core
- Packagist contao/core-bundle
- Packagist contao/contao
Junglewise Threat Intelligence
CVE-2017-10993: Contao Core directory traversal vulnerability
CVE-2017-10993 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: contao/core (Packagist), contao/core-bundle (Packagist), contao/contao (Packagist). Vendors: Packagist.
Related threats
- Contao path traversal in job attachment downloads
- Duplicate Advisory: Contao allows admin an account to upload SVG file containing malicious JavaScript
- Contao affected by directory traversal in the file selector widget
- Contao: Remember-me tokens will not be cleared after a password change
- Contao Cross-site Scripting vulnerabililty