CVE-2019-19712

Source
https://cve.org/CVERecord?id=CVE-2019-19712
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-19712.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-19712
Aliases
Published
2019-12-17T14:15:18.153Z
Modified
2026-02-24T11:32:10.897018Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them.

References

Affected packages

Git / github.com/contao/contao

Affected ranges

Type
GIT
Repo
https://github.com/contao/contao
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
Last affected
Introduced
Last affected

Affected versions

4.*
4.4.43
4.4.44
4.4.45
4.8.0
4.8.1
4.8.2
4.8.3
4.8.4
4.8.5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-19712.json"