Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Contao Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2024-45398 - Vulnerability Database
Contao

Contao Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2024-45398

High
Reference: CVE-2024-45398
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-45398
Title: Contao Unrestricted Upload of File with Dangerous Type Vulnerability
Overview:

Contao is an Open Source CMS. In affected versions a back end user with access to the file manager can upload malicious files and execute them on the server. Users are advised to update to Contao 4.13.49 5.3.15 or 5.4.3. Users unable to update are advised to configure their web server so it does not execute PHP files and other scripts in the Contao file upload directory.