Description

Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.

Remediation

References

CVE-2015-0269

Related Vulnerabilities

WordPress Plugin Ninja Popups Multiple Vulnerabilities (4.5.3)

WordPress Plugin Social Like Box and Page by WpDevArt Cross-Site Scripting (0.8.40)

WordPress Plugin Google +1 by BestWebSoft Cross-Site Scripting (1.1.6)

phpMyAdmin Improper Authentication Vulnerability (CVE-2018-12613)

MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2022-47927)

Severity

Medium

Classification

CVE-2015-0269 CWE-22 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities