Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Contao Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability - CVE-2024-45612 - Vulnerability Database
Contao

Contao Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability - CVE-2024-45612

Medium
Reference: CVE-2024-45612
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-45612
Title: Contao Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
Overview:

Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag which are then replaced on the web page (front end). Users are advised to update to Contao 4.13.49 5.3.15 or 5.4.3. Users unable to upgrade should disable canonical tags in the root page settings.