Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Contao Improper Privilege Management Vulnerability - CVE-2025-57759 - Vulnerability Database
Contao

Contao Improper Privilege Management Vulnerability - CVE-2025-57759

Medium
Reference: CVE-2025-57759
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-57759
Title: Contao Improper Privilege Management Vulnerability
Overview:

Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1 under certain conditions back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no workarounds.