https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 01:31:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4486 EUVD-2026-4486 https://cve.radiocsirt.org/vuln/euvd-2026-4486 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28235 <p>Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protected pages, Contao sends the cookie header to external urls as well, the passed options for the http client are used for all requests. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable crawling protected pages.</p> <p>Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protected pages, Contao sends the cookie header to external urls as well, the passed options for the http client are used for all requests. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable crawling protected pages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28235 https://cve.radiocsirt.org/vuln/ghsa-9jh5-qf84-x6pr <p><strong>Affected:</strong> Packagist: contao/core-bundle</p> <p>### Impact</p> <p>If the crawler is set to crawl protected pages, it sends the cookie header to externals URLs.</p> <p>### Patches</p> <p>Update to Contao 4.13.40 or 5.3.4.</p> <p>### Workarounds</p> <p>Disable crawling protected pages.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/session-cookie-disclosure-in-the-crawler</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> <p><strong>Affected:</strong> Packagist: contao/core-bundle</p> <p>### Impact</p> <p>If the crawler is set to crawl protected pages, it sends the cookie header to externals URLs.</p> <p>### Patches</p> <p>Update to Contao 4.13.40 or 5.3.4.</p> <p>### Workarounds</p> <p>Disable crawling protected pages.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/session-cookie-disclosure-in-the-crawler</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> https://cve.radiocsirt.org/vuln/ghsa-9jh5-qf84-x6pr https://cve.radiocsirt.org/vuln/gsd-2024-28235 gsd-2024-28235 https://cve.radiocsirt.org/vuln/gsd-2024-28235