CVE-2024-45604: Contao Core Bundle Directory Traversal Vulnerability
Summary
CVE-2024-45604: Contao affected by directory traversal in the file selector widget. Affects contao/core-bundle versions < 4.13.49. Fixed in 4.13.49. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Contao is an open-source content management system (CMS) designed for building websites and managing digital content. It offers a user-friendly interface and a range of features including a flexible templating system, built-in SEO tools, and support for multiple languages. The vulnerability in question affects the FileSelector widget, which is used by back-end users to select files from the server. This vulnerability allows unauthorized access to files outside the designated file mounts or document root, posing a risk to sensitive data.
Vulnerability Detail
The vulnerability arises from improper validation of file paths in the FileSelector widget, leading to a directory traversal issue. This allows back-end users to list and potentially access files that should be restricted, which could lead to exposure of sensitive information or unauthorized file manipulation. The technical aspect of this vulnerability is classified under CWE-22, which pertains to improper limitation of a pathname to a restricted directory.
How To Fix
Minimum fixed version
4.13.49
This is the first release that contains the fix.
composer require contao/core-bundle:4.13.49Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for this vulnerability. The only effective solution is to update to the patched version.
Conclusion
In summary, CVE-2024-45604 is a directory traversal vulnerability in the Contao Core Bundle that affects the FileSelector widget. It allows unauthorized access to files outside of designated directories, posing a risk to sensitive information. Users are strongly advised to update to version 4.13.49 to mitigate this risk.
See every vulnerability recorded for contao/core-bundle →
FAQ
The vulnerability is a directory traversal issue that allows unauthorized access to files outside of designated directories.
Back-end users of Contao who utilize the FileSelector widget are affected by this vulnerability.
The potential consequences include unauthorized access to sensitive files and data exposure.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 4.3, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for contao/core-bundle.
