Junglewise Threat Intelligence

CVE-2024-45965: Duplicate Advisory: Contao allows admin an account to upload SVG file containing malicious JavaScript

CVE-2024-45965 · Severity: low · CVSS 3.1 · Published 2024-10-02

Technologies: contao/contao (Packagist). Vendors: Packagist.

Executive brief

Duplicate Advisory: Contao allows admin an account to upload SVG file containing malicious JavaScript

Affected products

  • Packagist contao/contao

Related threats