Description Contao 4.7 allows CSRF. Remediation References CVE-2019-10642 Related Vulnerabilities WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1) PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8383) WordPress Plugin WooCommerce Subscriptions Cross-Site Scripting (2.6.2) RubyGems Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8320) MySQL CVE-2018-3171 Vulnerability (CVE-2018-3171) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2019-10642