Executive brief
Contao Does Not Expire Tokens Correctly
Affected products
- Packagist contao/core-bundle
- Packagist contao/contao
Junglewise Threat Intelligence
CVE-2019-10643: Contao Does Not Expire Tokens Correctly
CVE-2019-10643 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: contao/core-bundle (Packagist), contao/contao (Packagist). Vendors: Packagist.
Related threats
- Contao path traversal in job attachment downloads
- Duplicate Advisory: Contao allows admin an account to upload SVG file containing malicious JavaScript
- Contao affected by directory traversal in the file selector widget
- Contao: Remember-me tokens will not be cleared after a password change
- Cross site scripting via canonical tag in Contao