Executive brief
Contao CSRF Token Bypass
Affected products
- Packagist contao/core-bundle
- Packagist contao/contao
Junglewise Threat Intelligence
CVE-2019-10642: Contao CSRF Token Bypass
CVE-2019-10642 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: contao/core-bundle (Packagist), contao/contao (Packagist). Vendors: Packagist.
Related threats
- Contao path traversal in job attachment downloads
- Duplicate Advisory: Contao allows admin an account to upload SVG file containing malicious JavaScript
- Contao affected by directory traversal in the file selector widget
- Contao: Remember-me tokens will not be cleared after a password change
- Cross site scripting via canonical tag in Contao