CVE-2023-29200: Path Traversal Vulnerability in Contao/Contao
Summary
CVE-2023-29200: Path traversal vulnerability in the file manager. Affects contao/contao across 3 version ranges.
>= 4.9.0, < 4.9.40
>= 4.13.0, < 4.13.21
>= 5.1.0, < 5.1.4
Fixed in 4.9.40, 4.13.21 or 5.1.4, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Contao/Contao is an open-source content management system (CMS) that allows users to create and manage websites. It provides various features such as a file manager for handling files and directories within the CMS. However, a path traversal vulnerability has been discovered in the file manager of Contao/Contao.
Vulnerability Detail
The path traversal vulnerability in Contao/Contao's file manager allows authenticated users in the back end to list files outside the document root. This means that an attacker with valid credentials can potentially access sensitive files and directories on the server. The impact of this vulnerability can be severe, as it may lead to unauthorized access, data leakage, or even remote code execution.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.9.0, < 4.9.404.9.40composer require contao/contao:4.9.40 -
>= 4.13.0, < 4.13.214.13.21composer require contao/contao:4.13.21 -
>= 5.1.0, < 5.1.45.1.4composer require contao/contao:5.1.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There are no known workarounds for this vulnerability. It is essential to apply the recommended patches or update to the latest version of Contao to protect against potential exploits.
Conclusion
The path traversal vulnerability in Contao/Contao's file manager can have severe consequences, including unauthorized access and potential data leakage. It is crucial to update Contao to the recommended versions or apply the provided patches to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for contao/contao →
FAQ
A path traversal vulnerability, also known as directory traversal, allows an attacker to access files and directories outside the intended scope of an application. In this case, the vulnerability in Contao/Contao's file manager enables authenticated users to list files outside the document root.
The path traversal vulnerability in Contao/Contao can lead to unauthorized access to sensitive files and directories on the server. This may result in data leakage, exposure of confidential information, or even remote code execution, depending on the attacker's capabilities.
You can use Vulert's playground at Vulert Scanner to check if your Contao installation is affected by this vulnerability. Vulert analyzes the composer.lock file to identify and alert in real-time for open-source vulnerabilities.
No, there are no known workarounds for this vulnerability. It is crucial to update Contao to the recommended versions or apply the provided patches to mitigate the risk.
You can find more information about this vulnerability in the Contao security advisory at https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager. Additionally, you can open an issue in the Contao/Contao GitHub repository at https://github.com/contao/contao/issues/new/choose for any questions or comments.
References
Related vulnerabilities
Recent vulnerabilities recorded for contao/contao.
