Fluid Attacks Database

Description

Contao Core directory traversal vulnerability A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
packagist	contao/core-bundle	>=4.0.0 <4.4.1	4.4.1
packagist	contao/contao	>=4.0.0 <4.4.1	4.4.1
packagist	contao/core	>=3.0.0 <3.5.28	3.5.28

Aliases

1. CVE-2017-109932. NVD-2017-109933. OSV-2017-109934. GCVE-2017-10993

References

1. https://contao.org/en/news/contao-3_5_28.html2. https://contao.org/en/news/contao-4_4_1.html3. https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2017-10993.yaml4. https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2017-10993.yaml5. https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2017-10993.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.