CVE-2015-0269

Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.

Score

CVSS 3.0 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2017-05-26

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Contao Cms (Contao)

References

• https://contao.org/en/news/contao-3_2_19.html
• https://contao.org/en/news/contao-3_4_4.html
• https://contao.org/en/news/directory-traversal-vulnerability-cve-2015-0269.html