Baja
CVE-2026-57232
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 35
Restablecer filtros
Baja
CVE-2026-55825
Contao: Possible path traversal in job download URIs
Baja
CVE-2026-55824
Contao crawler leaks auth credentials to external hosts
Media
CVE-2025-57759
Contao does not properly manage privileges for page and article fields
Media
CVE-2025-57757
Contao can disclose sensitive information in the news module
Media
CVE-2025-57756
Contao discloses sensitive information in the front end search index
Media
CVE-2025-57758
Contao applies improper access control in the back end voters
Media
CVE-2025-29790
Contao Vulnerable to Cross-Site Scripting (XSS) through SVG uploads
Media
CVE-2024-45612
Contao affected by insert tag injection via canonical URL
Media
CVE-2024-45604
Contao affected by directory traversal in the file selector widget
Alta
CVE-2024-45398
Contao affected by remote command execution through file upload
Media
CVE-2024-28234
Contao: Insufficient BBCode sanitizer
Baja
CVE-2024-28191
Contao: Unencoded insert tags in the frontend
Media
CVE-2024-28190
Contao: Cross site scripting in the file manager
Media
CVE-2024-30262
Contao: Remember-me tokens will not be cleared after a password change
Alta
CVE-2024-28235
Contao: Possible cookie sharing with external domains while checking protected pages for broken links
Media
CVE-2023-36806
Cross site scripting via input unit widget
Alta
CVE-2023-29200
Path traversal vulnerability in the file manager
Crítica
CVE-2019-11512
Contao SQL injection in the file manager
Crítica
CVE-2017-16558
Contao SQL injection in the backend and listing module
Alta
CVE-2022-24899
Cross site scripting via canonical tag in Contao
Alta
CVE-2019-10642
Contao CSRF Token Bypass
Crítica
CVE-2019-10641
Contao Does Not Invalidate Existing Sessions When Password Changes
Alta
CVE-2017-10993
Contao Core directory traversal vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.